CVE-2024-5062
2 advisories.
PyPI/zenml CVE-2024-5062: medium 6.1, EPSS 0.39%
Reflected Cross-Site Scripting (XSS) in zenml
Action: Upgrade zenml to 0.58.0 or later.
pip install zenml==0.58.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.57.1 | 0.58.0 | - |
Fixed versions
| 0.58.0 |
Sources
- osv: GHSA-3434-hc3m-8mmm
- https://nvd.nist.gov/vuln/detail/CVE-2024-5062
- https://github.com/zenml-io/zenml/commit/21edd863c0ba53c1110b6f018a07c2d6853cf6d4
- https://github.com/pypa/advisory-database/tree/main/vulns/zenml/PYSEC-2024-176.yaml
- https://github.com/zenml-io/zenml
- https://huntr.com/bounties/ceddd3c1-a9da-4d6c-85c4-41d4d1e1102f
CVE-2024-5062 · published · modified · JSON
PyPI/zenml CVE-2024-5062: medium 6.1, EPSS 0.39%
A reflected Cross-Site Scripting (XSS) vulnerability was identified in zenml-io/zenml version 0.57.1. The vulnerability exists due to improper neutralization of input during web page generation, speci
Action: Upgrade zenml to 0.58.0 or later.
pip install zenml==0.58.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.58.0 | - |
Fixed versions
| 0.58.0 |
Sources
- osv: PYSEC-2024-176
- https://huntr.com/bounties/ceddd3c1-a9da-4d6c-85c4-41d4d1e1102f
- https://github.com/zenml-io/zenml/commit/21edd863c0ba53c1110b6f018a07c2d6853cf6d4
- https://github.com/advisories/GHSA-3434-hc3m-8mmm
CVE-2024-5062 · published · modified · JSON