GitHub Advisoryadvisory · PyPI

GHSA-6h3f-43vq-53hj Directory traversal in zenml

CRITICAL Published 2024-04-16 Modified 2025-05-12 Official page ↗
Aliases
CVE-2024-2083
Ecosystem
PyPI
Packages
zenml
Severity
Critical
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Weaknesses
CWE-29
Reviewed
2024-04-16

Affected packages

• PyPI zenml: < 0.55.5 → fixed in 0.55.5

Description

A directory traversal vulnerability exists in the zenml-io/zenml repository, specifically within the /api/v1/steps endpoint. Attackers can exploit this vulnerability by manipulating the 'logs' URI path in the request to fetch arbitrary file content, bypassing intended access restrictions. The vulnerability arises due to the lack of validation for directory traversal patterns, allowing attackers to access files outside of the restricted directory.

Related

Alias · CVE (1)

  • CVE-2024-2083 A directory traversal vulnerability exists in the zenml-io/zenml repository, specifically within the /api/v1/steps endpoint. vulnerability

Weakness · CWE (1)

  • CWE-29 Path Traversal: '\..\filename' weakness

References