CVE-2024-2083criticalCWE-29

CVE-2024-2083: critical vulnerability in zenml-io/zenml

Directory Traversal in zenml-io/zenml

Published · Updated

Follow this CVE+ Monitor zenml-io/zenml+ Monitor zenml

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

60Vexday Risk Score

Keep watching. It has a public proof of concept.

ssvc Attendcvss 9.9epss 37%
from disclosure to weapon691 days
Published on NVDApr 16
1st PoC+691d
A directory traversal vulnerability exists in the zenml-io/zenml repository, specifically within the /api/v1/steps endpoint. Attackers can exploit this vulnerability by manipulating the 'logs' URI path in the request to fetch arbitrary file content, bypassing intended access restrictions. The vulnerability arises due to the lack of validation for directory traversal patterns, allowing attackers to access files outside of the restricted directory.
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Affected products
zenml-io · zenml-io/zenml
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — zenml-io/zenml

In the same product, most dangerous first.

CVE-2024-9340HIGHDenial of Service (DoS) via Multipart Boundary in zenml-io/zenmlEPSS 1.0%CVE-2024-2035MEDIUMImproper Authorization in zenml-io/zenmlEPSS 0.6%CVE-2024-4311MEDIUMLack of login attempt rate-limiting in zenml-io/zenmlEPSS 0.5%CVE-2024-2260MEDIUMSession Fixation Vulnerability in zenml-io/zenmlEPSS 0.4%CVE-2024-4680LOWInsufficient Session Expiration in zenml-io/zenmlEPSS 0.4%CVE-2024-5062MEDIUMReflected XSS through survey redirect parameter in zenml-io/zenmlEPSS 0.4%