A Server-Side Request Forgery (SSRF) vulnerability in the get-artifacts function of MLflow allows remote attackers to disclose sensitive information without authentication. The flaw arises from improper validation of URIs before resource access, enabling information disclosure in the server context. The vulnerability has a high severity with a CVSS score of 8.2.