Zenmlio vulnerabilities
We track 3 vulnerabilities in Zenmlio products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on June 8, 2024.
Latest Zenmlio vulnerabilities
- 8.8 High severity
A vulnerability in zenml-io/zenml version 0.56.3 allows attackers to reuse old session…
A vulnerability in zenml-io/zenml version 0.56.3 allows attackers to reuse old session credentials or session IDs due to insufficient session expiration. Specifically, the session does not expire after a password change, enabling an attacker to maintain access
- 9.9 Critical severity
zenml-io/zenml: Path Traversal: '..filename'
A directory traversal vulnerability exists in the zenml-io/zenml repository, specifically within the /api/v1/steps endpoint. Attackers can exploit this vulnerability by manipulating the 'logs' URI path in the request to fetch arbitrary file content, bypassing
- 8.8 High severity
zenml: Improper Access Control
ZenML Server in the ZenML machine learning package before 0.46.7 for Python allows remote privilege escalation because the /api/v1/users/{user_name_or_id}/activate REST API endpoint allows access on the basis of a valid username along with a new password in th