An issue was discovered in zenml-io/zenml versions up to and including 0.55.4. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. Public exploit code available.
Authentication Bypass
Zenml
NVD
GitHub
CVSS 3.1
3.3
EPSS
0.2%
Kofax Power PDF AcroForm Annotation Out-Of-Bounds Read Information Disclosure Vulnerability. Rated low severity (CVSS 3.3), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Buffer Overflow
Information Disclosure
RCE
Power Pdf
NVD
CVSS 3.1
3.3
EPSS
0.4%
A race condition vulnerability exists in zenml-io/zenml versions up to and including 0.55.3, which allows for the creation of multiple users with the same username when requests are sent in parallel. Rated low severity (CVSS 3.1), this vulnerability is remotely exploitable.
Information Disclosure
Zenml
NVD
GitHub
CVSS 3.1
3.1
EPSS
0.3%