Vulnerabilities > CVE-2024-2171 - Unspecified vulnerability in Zenml

CVSS 4.8 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

HIGH

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

zenml

NVD

Published: 2024-06-06

Updated: 2024-11-21

Summary

A stored Cross-Site Scripting (XSS) vulnerability was identified in the zenml-io/zenml repository, specifically within the 'logo_url' field. By injecting malicious payloads into this field, an attacker could send harmful messages to other users, potentially compromising their accounts. The vulnerability affects version 0.55.3 and was fixed in version 0.56.2. The impact of exploiting this vulnerability could lead to user account compromise.

Vulnerable Configurations

Part	Description	Count
Application	Zenml Zenml Zenml - Zenml Zenml 0.1.0 Zenml Zenml 0.1.1 Zenml Zenml 0.1.2 Zenml Zenml 0.1.3 Zenml Zenml 0.1.4 Zenml Zenml 0.1.5 Zenml Zenml 0.2.0 Zenml Zenml 0.3.0 Zenml Zenml 0.3.1 Zenml Zenml 0.3.2 Zenml Zenml 0.3.3 Zenml Zenml 0.3.4 Zenml Zenml 0.3.5 Zenml Zenml 0.3.6 Zenml Zenml 0.3.6.1 Zenml Zenml 0.3.7 Zenml Zenml 0.3.7.1 Zenml Zenml 0.3.8 Zenml Zenml 0.3.9 Zenml Zenml 0.5.0 Zenml Zenml 0.5.1 Zenml Zenml 0.5.2 Zenml Zenml 0.5.3 Zenml Zenml 0.5.4 Zenml Zenml 0.5.5 Zenml Zenml 0.5.6 Zenml Zenml 0.5.7 Zenml Zenml 0.6.0 Zenml Zenml 0.6.1 Zenml Zenml 0.6.2 Zenml Zenml 0.6.3 Zenml Zenml 0.7.0 Zenml Zenml 0.7.1 Zenml Zenml 0.7.2 Zenml Zenml 0.7.3 Zenml Zenml 0.8.0 Zenml Zenml 0.8.1 Zenml Zenml 0.9.0 Zenml Zenml 0.10.0 Zenml Zenml 0.11.0 Zenml Zenml 0.12.0 Zenml Zenml 0.13.0 Zenml Zenml 0.13.1 Zenml Zenml 0.13.2 Zenml Zenml 0.20.0 Zenml Zenml 0.20.1 Zenml Zenml 0.20.2 Zenml Zenml 0.20.3 Zenml Zenml 0.20.4 Zenml Zenml 0.20.5 Zenml Zenml 0.21.0 Zenml Zenml 0.21.1 Zenml Zenml 0.22.0 Zenml Zenml 0.23.0 Zenml Zenml 0.30.0 Zenml Zenml 0.31.0 Zenml Zenml 0.31.1 Zenml Zenml 0.32.0 Zenml Zenml 0.32.1 Zenml Zenml 0.33.0 Zenml Zenml 0.34.0 Zenml Zenml 0.35.0 Zenml Zenml 0.35.1 Zenml Zenml 0.36.0 Zenml Zenml 0.36.1 Zenml Zenml 0.37.0 Zenml Zenml 0.38.0 Zenml Zenml 0.39.0 Zenml Zenml 0.39.1 Zenml Zenml 0.40.0 Zenml Zenml 0.40.1 Zenml Zenml 0.40.2 Zenml Zenml 0.40.3 Zenml Zenml 0.41.0 Zenml Zenml 0.42.0 Zenml Zenml 0.42.1 Zenml Zenml 0.42.2 Zenml Zenml 0.43.0 Zenml Zenml 0.43.1 Zenml Zenml 0.44.0 Zenml Zenml 0.44.1 Zenml Zenml 0.44.2 Zenml Zenml 0.44.3 Zenml Zenml 0.44.4 Zenml Zenml 0.45.0 Zenml Zenml 0.45.1 Zenml Zenml 0.45.2 Zenml Zenml 0.45.3 Zenml Zenml 0.45.4 Zenml Zenml 0.45.5 Zenml Zenml 0.45.6 Zenml Zenml 0.46.0 Zenml Zenml 0.46.1 Zenml Zenml 0.47.0 Zenml Zenml 0.50.0 Zenml Zenml 0.51.0 Zenml Zenml 0.52.0 Zenml Zenml 0.53.0 Zenml Zenml 0.53.1 Zenml Zenml 0.54.0 Zenml Zenml 0.54.1 Zenml Zenml 0.55.0 Zenml Zenml 0.55.1 Zenml Zenml 0.55.2 Zenml Zenml 0.55.3 Zenml Zenml 0.55.4 Zenml Zenml 0.55.5 Zenml Zenml 0.56.0 Zenml Zenml 0.56.1	133

Summary

Vulnerable Configurations

References