Skip to content
OpenAdvisories
High · 8.8 CVE-2024-28424 EUVD-2024-25521GHSA-gqfr-84mj-fvqr

zenml v0.55.4 was discovered to contain an arbitrary file upload vulnerability in the load function at /materializers/cloudpickle_materiali…

Published Mar 14, 2024 · Updated Apr 10, 2025 · Assigned by mitre

Description

zenml v0.55.4 was discovered to contain an arbitrary file upload vulnerability in the load function at /materializers/cloudpickle_materializer.py. This vulnerability allows attackers to execute arbitrary code via uploading a crafted file.

References