CVE-2024-31462

CVSS 3.1 Score 6.3 of 10 (medium)

Details

Published Apr 12, 2024
Updated: Apr 15, 2024
CWE ID 22

Summary

CVE-2024-31462 is a vulnerability that affects stable-diffusion-webui version 1.7.0, which is a web interface for Stable Diffusion using the Gradio library. This vulnerability allows for a limited file write exploit on Windows systems. The issue arises from user input being used to create a file path, which is later opened for writing, enabling the attacker to write JSON files anywhere on the server where the web server has access. The base severity of this vulnerability is rated as MEDIUM with a base score of 6.3 according to the CVSS v3.1 vector string provided by security-advisories@github.com. The risk score is 25, and the exploitability score is 2.8 out of 10. It requires low privileges and no user interaction, making it potentially dangerous for organizations using stable-diffusion-webui on Windows systems if not remediated promptly.

Note: The analysis_description field in the provided text is empty, so there are no additional facts or information available regarding that aspect of the vulnerability.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-31462 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options