Beveiligingsadvies

CVE-2024-9340

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-03-20 10:08:50

Laatst bijgewerkt 2025-07-15 10:48:56

Toegewezen door @huntr_ai

CVSS-score 7.5

Status PUBLISHED

Beschrijving

A Denial of Service (DoS) vulnerability in zenml-io/zenml version 0.66.0 allows unauthenticated attackers to cause excessive resource consumption by sending malformed multipart requests with arbitrary characters appended to the end of multipart boundaries. This flaw in the multipart request boundary processing mechanism leads to an infinite loop, resulting in a complete denial of service for all users. Affected endpoints include `/api/v1/login` and `/api/v1/device_authorization`.

← Alle CVE's bekijken Bekijk op cve.org ↗