CVE-2024-11043

Summary

CVE-2024-11043 is a Denial of Service (DoS) vulnerability affecting the /api/v1/boards/{board_id} endpoint in invoke-ai's version 5.0.2. An attacker can exploit this vulnerability by sending an excessively large payload in the board_name field during a PATCH request. The result is an unresponsive UI, making it difficult for users to manage the affected board. Furthermore, the option to delete the board becomes inaccessible, magnifying the severity of the issue. This vulnerability can render the UI unusable, impacting productivity and potentially leading to data loss if the affected board cannot be deleted.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.