Description

A session fixation vulnerability exists in the zenml-io/zenml application, where JWT tokens used for user authentication are not invalidated upon logout. This flaw allows an attacker to bypass authentication mechanisms by reusing a victim's JWT token.

INFO

Published Date :

2024-04-16T00:00:14.951Z

Last Modified :

2024-08-01T19:03:39.351Z

Source :

@huntr_ai
AFFECTED PRODUCTS

The following products are affected by CVE-2024-2260 vulnerability.

Vendors Products
Zenml
  • Zenml
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-2260.

URL Resource
https://github.com/zenml-io/zenml/commit/68bcb3ba60cba9729c9713a49c39502d40fb945e cve-icon cve-icon cve-icon
https://huntr.com/bounties/2d0856ec-ed73-477a-8ea2-d5d4f15cf167 cve-icon cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact