Vulnerabilities > CVE-2024-2213 - Unspecified vulnerability in Zenml

CVSS 3.3 - LOW

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

LOW

Availability impact

NONE

local

low complexity

zenml

NVD

Published: 2024-06-06

Updated: 2024-10-11

Summary

An issue was discovered in zenml-io/zenml versions up to and including 0.55.4. Due to improper authentication mechanisms, an attacker with access to an active user session can change the account password without needing to know the current password. This vulnerability allows for unauthorized account takeover by bypassing the standard password change verification process. The issue was fixed in version 0.56.3.

Vulnerable Configurations

Part	Description	Count
Application	Zenml Zenml Zenml - Zenml Zenml 0.1.0 Zenml Zenml 0.1.1 Zenml Zenml 0.1.2 Zenml Zenml 0.1.3 Zenml Zenml 0.1.4 Zenml Zenml 0.1.5 Zenml Zenml 0.2.0 Zenml Zenml 0.3.0 Zenml Zenml 0.3.1 Zenml Zenml 0.3.2 Zenml Zenml 0.3.3 Zenml Zenml 0.3.4 Zenml Zenml 0.3.5 Zenml Zenml 0.3.6 Zenml Zenml 0.3.6.1 Zenml Zenml 0.3.7 Zenml Zenml 0.3.7.1 Zenml Zenml 0.3.8 Zenml Zenml 0.3.9 Zenml Zenml 0.5.0 Zenml Zenml 0.5.1 Zenml Zenml 0.5.2 Zenml Zenml 0.5.3 Zenml Zenml 0.5.4 Zenml Zenml 0.5.5 Zenml Zenml 0.5.6 Zenml Zenml 0.5.7 Zenml Zenml 0.6.0 Zenml Zenml 0.6.1 Zenml Zenml 0.6.2 Zenml Zenml 0.6.3 Zenml Zenml 0.7.0 Zenml Zenml 0.7.1 Zenml Zenml 0.7.2 Zenml Zenml 0.7.3 Zenml Zenml 0.8.0 Zenml Zenml 0.8.1 Zenml Zenml 0.9.0 Zenml Zenml 0.10.0 Zenml Zenml 0.11.0 Zenml Zenml 0.12.0 Zenml Zenml 0.13.0 Zenml Zenml 0.13.1 Zenml Zenml 0.13.2 Zenml Zenml 0.20.0 Zenml Zenml 0.20.1 Zenml Zenml 0.20.2 Zenml Zenml 0.20.3 Zenml Zenml 0.20.4 Zenml Zenml 0.20.5 Zenml Zenml 0.21.0 Zenml Zenml 0.21.1 Zenml Zenml 0.22.0 Zenml Zenml 0.23.0 Zenml Zenml 0.30.0 Zenml Zenml 0.31.0 Zenml Zenml 0.31.1 Zenml Zenml 0.32.0 Zenml Zenml 0.32.1 Zenml Zenml 0.33.0 Zenml Zenml 0.34.0 Zenml Zenml 0.35.0 Zenml Zenml 0.35.1 Zenml Zenml 0.36.0 Zenml Zenml 0.36.1 Zenml Zenml 0.37.0 Zenml Zenml 0.38.0 Zenml Zenml 0.39.0 Zenml Zenml 0.39.1 Zenml Zenml 0.40.0 Zenml Zenml 0.40.1 Zenml Zenml 0.40.2 Zenml Zenml 0.40.3 Zenml Zenml 0.41.0 Zenml Zenml 0.42.0 Zenml Zenml 0.42.1 Zenml Zenml 0.42.2 Zenml Zenml 0.43.0 Zenml Zenml 0.43.1 Zenml Zenml 0.44.0 Zenml Zenml 0.44.1 Zenml Zenml 0.44.2 Zenml Zenml 0.44.3 Zenml Zenml 0.44.4 Zenml Zenml 0.45.0 Zenml Zenml 0.45.1 Zenml Zenml 0.45.2 Zenml Zenml 0.45.3 Zenml Zenml 0.45.4 Zenml Zenml 0.45.5 Zenml Zenml 0.45.6 Zenml Zenml 0.46.0 Zenml Zenml 0.46.1 Zenml Zenml 0.47.0 Zenml Zenml 0.50.0 Zenml Zenml 0.51.0 Zenml Zenml 0.52.0 Zenml Zenml 0.53.0 Zenml Zenml 0.53.1 Zenml Zenml 0.54.0 Zenml Zenml 0.54.1 Zenml Zenml 0.55.0 Zenml Zenml 0.55.1 Zenml Zenml 0.55.2 Zenml Zenml 0.55.3 Zenml Zenml 0.55.4 Zenml Zenml 0.55.5 Zenml Zenml 0.56.0 Zenml Zenml 0.56.1 Zenml Zenml 0.56.2	134

Summary

Vulnerable Configurations

References