ZenML ZenML Server - Improper Authentication

ZenML Server in the ZenML machine learning package before 0.46.7 for Python allows remote privilege escalation because the /api/v1/users/usernameorid/activate REST API endpoint allows access on the basis of a valid username along with a new password in the request body. id: CVE-2024-25723 info:...

Exploit for Improper Access Control in Zenml

Exploit for CVE-2024-25723 This repository is dedicated to ad...

CVE-2024-25723

ZenML Server in the ZenML machine learning package before 0.46.7 for Python allows remote privilege escalation because the /api/v1/users/usernameorid/activate REST API endpoint allows access on the basis of a valid username along with a new password in the request body. These are also patched...

CVE-2024-25723

The ZenML Server component in the ZenML machine learning package (Python) is vulnerable to remote privilege escalation due to an improper access control mechanism. The /api/v1/users/{user_name_or_id}/activate REST API endpoint allows unauthorized access if a valid username is provided along with ...