CVE-2024-2083
Last modified
CVE-2024-2083 is a critical-severity vulnerability rated 9.9/10 on the CVSS scale. A directory traversal vulnerability exists in the zenml-io/zenml repository, specifically within the /api/v1/steps endpoint. Attackers can exploit this vulnerability by manipulating the 'logs' URI path in the request to fetch arbitrary file content, bypassing intended access restrictions. EPSS estimates a 39.09% chance of exploitation in the next 30 days.
Description
A directory traversal vulnerability exists in the zenml-io/zenml repository, specifically within the /api/v1/steps endpoint. Attackers can exploit this vulnerability by manipulating the 'logs' URI path in the request to fetch arbitrary file content, bypassing intended access restrictions. The vulnerability arises due to the lack of validation for directory traversal patterns, allowing attackers to access files outside of the restricted directory.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Zenml | Zenml | < 0.55.5 |
References
- https://github.com/zenml-io/zenml/commit/00e934f33a243a554f5f65b80eefd5ea5117367bPatch, Third Party Advisory
- https://huntr.com/bounties/f24b2216-6a4b-42a1-becb-9b47e6cf117fExploit, Issue Tracking, Third Party Advisory
- https://github.com/zenml-io/zenml/commit/00e934f33a243a554f5f65b80eefd5ea5117367bPatch, Third Party Advisory
- https://huntr.com/bounties/f24b2216-6a4b-42a1-becb-9b47e6cf117fExploit, Issue Tracking, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2024-2083?
How severe is CVE-2024-2083?
How do I fix CVE-2024-2083?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-20824Implicit intent hijacking vulnerability in VoiceSearch of Ga…5.5
- CVE-2024-20825Implicit intent hijacking vulnerability in IAP of Galaxy Sto…5.5
- CVE-2024-20826Implicit intent hijacking vulnerability in UPHelper library …5.5
- CVE-2024-20827Improper access control vulnerability in Samsung Gallery pri…4.6
- CVE-2024-20828Improper authorization verification vulnerability in Samsung…4.6
- CVE-2024-20829Missing proper interaction for opening deeplink in Samsung I…5.3
- CVE-2024-20830Incorrect default permission in AppLock prior to SMR MAr-202…5.3
- CVE-2024-20831Stack overflow in Little Kernel in bootloader prior to SMR M…6.7
- CVE-2024-20832Heap overflow in Little Kernel in bootloader prior to SMR Ma…6.7
- CVE-2024-20833Use after free vulnerability in pub_crypto_recv_msg prior to…6.4
- CVE-2024-20834The sensitive information exposure vulnerability in WlanTest…3.3
- CVE-2024-20835Improper access control vulnerability in CustomFrequencyMana…7.8
Are you affected by CVE-2024-2083?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST