CVE-2024-2083

Directory Traversal in zenml-io/zenml

A directory traversal vulnerability exists in the zenml-io/zenml repository, specifically within the /api/v1/steps endpoint. Attackers can exploit this vulnerability by manipulating the 'logs' URI path in the request to fetch arbitrary file content, bypassing intended access restrictions. The vulnerability arises due to the lack of validation for directory traversal patterns, allowing attackers to access files outside of the restricted directory.

Affected

zenml-io · zenml-io/zenml

CVSS v3.1 NVD

9.9 CRITICALCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CVSS v3.0 HUNTR

9.9 CRITICALCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS

37.49% chance of exploitation in the next 30 days, 99th percentile

Published

2024-04-16

Updated

2024-08-01

Proof-of-concept exploits (1)

• Saptaktdk/zenml-CVE-2024-2083-POC0★ · 2026-03-09

Security advisories

• zenml-io/zenml/commit/00e934f33a243a554f5f65b80eefd5ea5117367b
• https://huntr.com/bounties/f24b2216-6a4b-42a1-becb-9b47e6cf117f
• advisories/GHSA-6h3f-43vq-53hj

References

• CVE Record
• NVD entry

Related

• CVE-2018-6574