CVE-2024-2083 | A directory traversal vulnerability exists in the zenml-io/z… | CVSS 9.9 CRITICAL

Description

A directory traversal vulnerability exists in the zenml-io/zenml repository, specifically within the /api/v1/steps endpoint. Attackers can exploit this vulnerability by manipulating the 'logs' URI path in the request to fetch arbitrary file content, bypassing intended access restrictions. The vulnerability arises due to the lack of validation for directory traversal patterns, allowing attackers to access files outside of the restricted directory.

Metadata

CVE ID: CVE-2024-2083
State: PUBLISHED
Assigner: @huntr_ai
Reserved: 2024-03-01 14:43 UTC
Published: 2024-04-16 00:00 UTC
Last updated: 2024-08-01 19:03 UTC
Primary CWE: CWE-29
CWE-29 Path Traversal: '\..\filename'
Vendor / Product: zenml-io / zenml-io/zenml
Sources: cve.org · NVD

Severity & Metrics

9.9 CRITICAL CVSS 3.0

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

SSVC — CISA Coordinator

Exploitation: PoC
Automatable: no
Tech. Impact: total

Affected products (1)

Vendor	Product	Platform	Versions
zenml-io	zenml-io/zenml	—	unspecified < 0.55.5

Weakness (CWE)

CWE	Source	Description
CWE-29	cna	CWE-29 Path Traversal: '\..\filename'

CVSS scores (1)

Score	Severity	Version	Source	Vector
9.9	CRITICAL	3.0	cna	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

References (2)