CVE-2024-11044

Summary

CVE-2024-11044 is a newly disclosed open redirect vulnerability affecting automatic1111/stable-diffusion-webui version 1.10.0. This issue allows unauthenticated attackers to redirect unsuspecting users to malicious websites through specially crafted URLs. The implications of this vulnerability are significant, as it can be exploited to carry out phishing attacks, distribute malware, and steal user credentials. By manipulating the redirect functionality, attackers can lure users to fake login pages, install unwanted software, or steal sensitive information. Users are strongly advised to update to the latest version of stable-diffusion-webui to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.