Lucene search
K

CVE-2024-28424

๐Ÿ—“๏ธย 14 Mar 2024ย 00:00:00Reported byย mitreTypeย 
cve
ย cve
๐Ÿ”—ย web.nvd.nist.gov๐Ÿ‘ย 57ย Views๐ŸŒ WEB

zenml v0.55.4 arbitrary file upload vulnerability in load function at /materializers/cloudpickle_materializer.p

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
Circl
CVE-2024-28424
14 Mar 202420:27
โ€“circl
CNNVD
ZenML Security Vulnerability
14 Mar 202400:00
โ€“cnnvd
Cvelist
CVE-2024-28424
14 Mar 202400:00
โ€“cvelist
EUVD
EUVD-2024-25521
3 Oct 202520:07
โ€“euvd
NVD
CVE-2024-28424
14 Mar 202419:15
โ€“nvd
Positive Technologies
PT-2024-22427 ยท Zenml ยท Zenml
14 Mar 202400:00
โ€“ptsecurity
RedhatCVE
CVE-2024-28424
23 May 202509:55
โ€“redhatcve
Vulnrichment
CVE-2024-28424
14 Mar 202400:00
โ€“vulnrichment
Tenable Nessus
ZenML < 0.55.5 Arbitrary File Upload
3 Jan 202500:00
โ€“nessus
NVD
Vulnrichment
Node
zenmlzenmlMatch0.55.4
ParameterPositionPathDescriptionCWE
filebinary/materializers/cloudpickle_materializer.pyArbitrary file upload vulnerability in load function may allow code execution via crafted uploaded materializer.CWE-94

Data

Build on a solid foundation withย Vulners data

Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data

Api

Power your application withย Vulners API

The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access

App

Assess and manage vulnerabilities withย Vulnersย tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

05 May 2025 17:53Current
8.1High risk
Vulners AI Score8.1
CVSS 3.18.8
EPSS0.00106
SSVC
57