{"cve":"CVE-2024-3099","nvd":{"published":"2024-06-06T19:15:59.393","modified":"2026-06-17T07:43:18.473","status":"Modified","description":"A vulnerability in mlflow/mlflow version 2.11.1 allows attackers to create multiple models with the same name by exploiting URL encoding. This flaw can lead to Denial of Service (DoS) as an authenticated user might not be able to use the intended model, as it will open a different model each time. Additionally, an attacker can exploit this vulnerability to perform data model poisoning by creating a model with the same name, potentially causing an authenticated user to become a victim by using the poisoned model. The issue stems from inadequate validation of model names, allowing for the creation of models with URL-encoded names that are treated as distinct from their URL-decoded counterparts.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","score":5.4},"cwes":["CWE-475"],"references":["https://huntr.com/bounties/8d96374a-ce8d-480e-9cb0-0a7e5165c24a","https://huntr.com/bounties/8d96374a-ce8d-480e-9cb0-0a7e5165c24a"],"products":["lfprojects:mlflow"],"source":"nvd","synced_at":"2026-10-19T21:51:20.603330631+00:00"},"epss":{"cve":"CVE-2024-3099","score":0.00442,"percentile":0.38412,"date":"2026-10-31"},"kev":null,"osv":[{"id":"GHSA-8f8q-q2j7-7j2m","url":"https://osv.dev/vulnerability/GHSA-8f8q-q2j7-7j2m","summary":"Undefined Behavior in mlflow","modified":"2026-07-07T17:56:27.089622321Z","packages":[{"ecosystem":"PyPI","name":"mlflow","purl":"pkg:pypi/mlflow","ranges":["<2.11.3"],"fixed":["2.11.3"]}]},{"id":"PYSEC-2026-1645","url":"https://osv.dev/vulnerability/PYSEC-2026-1645","summary":"Undefined Behavior in mlflow","modified":"2026-07-07T17:56:27.089622321Z","packages":[{"ecosystem":"PyPI","name":"mlflow","purl":"pkg:pypi/mlflow","ranges":["<2.11.3"],"fixed":["2.11.3"]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}