An attacker is able to arbitrarily create an account in MLflow bypassing any authentication requirment.
@huntr_ai·CWE-598·Published 2023-11-16