CVE-2024-12374

Summary

CVE-2024-12374 is a stored cross-site scripting (XSS) vulnerability affecting the automatic1111/stable-diffusion-webui repository, specifically version 82a973c. An attacker can exploit this issue by uploading an HTML file, which is incorrectly interpreted as application/html content by the application. victims who access the malicious link will unwittingly execute arbitrary JavaScript code in their web browsers, potentially leading to data theft or other malicious activities. This vulnerability poses a significant risk to users of this application and highlights the importance of regularly updating and patching software to mitigate security threats.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.