CVE-2022-0736

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Insecure Temporary File in GitHub repository mlflow/mlflow prior to 1.23.1.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-377

Affected software

VendorProductVersions
mlflowmlflow/mlflow>= unspecified, < 1.23.1

References

Timeline

Published
Feb 23, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-07374.8The Text Hover WordPress plugin before 4.2 does not sanitize and escape the text to hover, which could allow high privilege users to performCVE-2022-07387.5An issue has been discovered in GitLab affecting all versions starting from 14.6 before 14.6.5, all versions starting from 14.7 before 14.7.CVE-2022-07399.8The BookingPress WordPress plugin before 1.0.11 fails to properly sanitize user supplied POST data before it is used in a dynamically constrCVE-2022-07404.3Incorrect authorization in the Asana integration's branch restriction feature in all versions of GitLab CE/EE starting from version 7.8.0 beCVE-2022-07417.5Improper input validation in all versions of GitLab CE/EE using sendmail to send emails allowed an attacker to steal environment variables vCVE-2022-07427.5Memory leak in icmp6 implementation in Linux Kernel 5.13+ allows a remote attacker to DoS a host by making it go out-of-memory via icmp6 pacCVE-2022-07434.6Cross-site Scripting (XSS) - Stored in GitHub repository getgrav/grav prior to 1.7.31.CVE-2022-07456.5The Like Button Rating WordPress plugin before 2.6.45 allows any logged-in user, such as subscriber, to send arbitrary e-mails to any recipiCVE-2022-07464.3Business Logic Errors in GitHub repository dolibarr/dolibarr prior to 16.0.CVE-2022-07479.8The Infographic Maker WordPress plugin before 4.3.8 does not validate and escape the post_id parameter before using it in a SQL statement viCVE-2022-07489.8The package post-loader from 0.0.0 are vulnerable to Arbitrary Code Execution which uses a markdown parser in an unsafe way so that any javaCVE-2022-07499.8This affects all versions of package SinGooCMS.Utility. The socket client in the package can pass in the payload via the user-controllable i
CVE-2022-0736: High severity, CVSS 7.5 | Vulnix