by Kastro
Paper/Archive/CVE-2024-2083

CVE-2024-2083

zenml-io zenml-io/zenml — Directory Traversal in zenml-io/zenml

EPSS 37%public exploitCVSS 9.9
critical.is priorityof 100
59
CVSS 9.9 (CNA, NVD agree)9.9 / 10 × 3029.7Not in CISA KEV+300.0EPSS percentile 98.5.985 × 2019.7Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

A directory traversal vulnerability exists in the zenml-io/zenml repository, specifically within the /api/v1/steps endpoint. Attackers can exploit this vulnerability by manipulating the 'logs' URI path in the request to fetch arbitrary file content, bypassing intended access restrictions. The vulnerability arises due to the lack of validation for directory traversal patterns, allowing attackers to access files outside of the restricted directory.

Affected

ProductAffectedFixed inSource
zenml-io/zenmlunspecified – < 0.55.50.55.5CNA
zenml< 0.55.50.55.5CISA-ADP

Scores by source

@huntr_ai (CNA)9.9CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
NVD9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: total

References

refhuntr.com/bounties/f24b2216-6a4b-42a1-becb-9b47e6cf117frefgithub.com/zenml-io/zenml/commit/00e934f33a243a554f5f65b80eefd5ea5117367b