Saptaktdk/zenml-CVE-2024-2083-POC

PoC

Dockerized vulnerable lab demonstrating CVE-2024-2083 in ZenML, a path traversal vulnerability in the step logs API allowing arbitrary file read.

view exploit source poc_in_githubauthor Saptaktdkpublished 2026-03-08catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2024-2083US	critical9.9	37.5% (99th)	Exploit	2024-04-16
A directory traversal vulnerability exists in the zenml-io/zenml repository, specifically within the /api/v1/steps endpoint. Attackers can exploit this vulnerability by manipulatin…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.