CVE-2024-2171

A stored Cross-Site Scripting (XSS) vulnerability was identified in the zenml-io/zenml repository, specifically within the 'logo_url' field. By injecting malicious payloads into this field, an attacker could send harmful messages to other users, potentially compromising their accounts. The vulnerability affects version 0.55.3 and was fixed in version 0.56.2. The impact of exploiting this vulnerability could lead to user account compromise.

• CWE-79

• https://github.com/zenml-io/zenml/commit/68bcb3ba60cba9729c9713a49c39502d40fb945ePatch
• https://huntr.com/bounties/cee06a28-7e3b-460b-b504-69add838ebe8Exploit, Issue Tracking, Patch, Third Party Advisory
• https://github.com/zenml-io/zenml/commit/68bcb3ba60cba9729c9713a49c39502d40fb945ePatch
• https://huntr.com/bounties/cee06a28-7e3b-460b-b504-69add838ebe8Exploit, Issue Tracking, Patch, Third Party Advisory

Published

Jun 6, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-21702Rejected reason: To maintain compliance with CNA rules, we h…
• CVE-2024-21703This Medium severity Security Misconfiguration vulnerability…6.4
• CVE-2024-21704Rejected reason: To maintain compliance with CNA rules, we h…
• CVE-2024-21705Rejected reason: To maintain compliance with CNA rules, we h…
• CVE-2024-21708Rejected reason: To maintain compliance with CNA rules, we h…
• CVE-2024-21709Rejected reason: To maintain compliance with CNA rules, we h…
• CVE-2024-21710Rejected reason: To maintain compliance with CNA rules, we h…
• CVE-2024-21711Rejected reason: To maintain compliance with CNA rules, we h…
• CVE-2024-21712Rejected reason: To maintain compliance with CNA rules, we h…
• CVE-2024-21713Rejected reason: To maintain compliance with CNA rules, we h…
• CVE-2024-21714Rejected reason: To maintain compliance with CNA rules, we h…
• CVE-2024-21715Rejected reason: To maintain compliance with CNA rules, we h…