CVE-2024-2260
PoC —CVSS 3.1
4.2 medium
EPSS
<1%p37
Published
()
Modified
Description
A session fixation vulnerability exists in the zenml-io/zenml application, where JWT tokens used for user authentication are not invalidated upon logout. This flaw allows an attacker to bypass authentication mechanisms by reusing a victim's JWT token.
- Vendors
- zenml
- Products
- zenml
- Weakness
- CWE-384
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
In the news0 stories
No ingested article mentions this CVE yet.