Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
zenml-CVE-2024-2083-POC — Dockerized vulnerable lab demonstrating CVE-2024-2083 in ZenML, a path traversal vulnerability in the step logs API allowing arbitrary file read. | Kitploit
Tools/GitHubGitHub/saptaktdk/zenml-cve-2024-2083-poc
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingLearning & EducationLabs & Practice
GitHubsaptaktdk/zenml-cve-2024-2083-poc

zenml-CVE-2024-2083-POC

Dockerized vulnerable lab demonstrating CVE-2024-2083 in ZenML, a path traversal vulnerability in the step logs API allowing arbitrary file read.

View Repository
6 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2024-2083 – ZenML Arbitrary File Read PoC

This repository demonstrates how to reproduce CVE-2024-2083, an Arbitrary File Read vulnerability in ZenML.

The issue allows an attacker to read files from the server filesystem by abusing the logs.uri field in the /api/v1/steps API request. By modifying this value using a proxy, a path traversal can be performed and sensitive files can be disclosed through the ZenML UI logs.

Overview

  • Vulnerability: CVE-2024-2083
  • Affected Software: ZenML
  • Impact: Arbitrary File Read via Path Traversal
  • Attack Vector: Manipulation of logs.uri in the /api/v1/steps API request

The attack works by intercepting the API request generated when a pipeline runs and modifying the log URI path.

Download Tool