CVE-2024-12375
CVSS 3.0 Score 6.5 of 10 (medium)
Details
Published Mar 20, 2025
CWE ID 36
Summary
CVE-2024-12375 is a local file inclusion vulnerability discovered in automatic1111/stable-diffusion-webui. Affecting version git 82a973c, this issue enables attackers to read arbitrary files on the system by crafting specific requests to the application. This flaw could potentially lead to sensitive data exposure if exploited successfully. Users are urged to update to a patched version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.