CVE-2024-28424

ZenML version 0.55.4 is susceptible to an arbitrary file upload vulnerability within the load function located at /materializers/cloudpickle_materializer.py. This flaw allows an attacker to execute arbitrary code by uploading a specially crafted file. To mitigate this risk, users are advised to d...