Advisoriesby IbisZenMLGHSA-vf7j-cmrj-pmmm
ZenML Server Remote Privilege Escalation Vulnerability
Fix: upgrade to 0.42.2 or later (4 fixed versions below)
ZenML Server in the ZenML package before 0.46.7 for Python allows remote privilege escalation because the /api/v1/users/{user_name_or_id}/activate REST API endpoint allows access on the basis of a valid username along with a new password in the request body. These are also patched versions: 0.44.4, 0.43.1, and 0.42.2.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| zenml PyPI | < 0.42.2 | 0.42.2 |
| >= 0.43.0, < 0.43.1 | 0.43.1 | |
| >= 0.45.0, < 0.46.7 | 0.46.7 | |
| >= 0.44.0, < 0.44.4 | 0.44.4 |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-284
- Also known as
- CVE-2024-25723, PYSEC-2026-2072
More ZenML advisories
All ZenML
Cross site scripting in zenmlCVE-2024-2171fixed in 0.56.2Clickjacking in zenmlCVE-2024-2383fixed in 0.56.3Improper authentication in zenmlCVE-2024-2213fixed in 0.56.3Race condition in zenmlCVE-2024-2032fixed in 0.55.5zenml Session Fixation vulnerabilityCVE-2024-2260fixed in 0.56.2Directory traversal in zenmlCVE-2024-2083fixed in 0.55.5