3 matches found
CVE-2024-28424
zenml v0.55.4 was discovered to contain an arbitrary file upload vulnerability in the load function at /materializers/cloudpicklematerializer.py. This vulnerability allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2024-28424
zenml v0.55.4 was discovered to contain an arbitrary file upload vulnerability in the load function at /materializers/cloudpicklematerializer.py. This vulnerability allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2024-28424
ZenML version 0.55.4 is susceptible to an arbitrary file upload vulnerability within the load function located at /materializers/cloudpickle_materializer.py. This flaw allows an attacker to execute arbitrary code by uploading a specially crafted file. To mitigate this risk, users are advised to d...