CVE-2024-2383

CVE-2024-2383 is a clickjacking vulnerability affecting zenml-io/zenml versions up to 0.55.5, stemming from the absence of proper X-Frame-Options or Content-Security-Policy HTTP headers. This medium-severity vulnerability (CVSS 6.1) allows an attacker to embed the ZenML UI in a malicious iframe, potentially tricking users into performing unauthorized actions. While the attack complexity is low, it requires user interaction and could lead to limited confidentiality and integrity impacts. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.