CVE-2024-31462

Summary

CVE-2024-31462 is a vulnerability that affects stable-diffusion-webui version 1.7.0, which is a web interface for Stable Diffusion using the Gradio library. This vulnerability allows for a limited file write exploit on Windows systems. The issue arises from user input being used to create a file path, which is later opened for writing, enabling the attacker to write JSON files anywhere on the server where the web server has access. The base severity of this vulnerability is rated as MEDIUM with a base score of 6.3 according to the CVSS v3.1 vector string provided by [email protected]. The risk score is 25, and the exploitability score is 2.8 out of 10. It requires low privileges and no user interaction, making it potentially dangerous for organizations using stable-diffusion-webui on Windows systems if not remediated promptly. Note: The analysis_description field in the provided text is empty, so there are no additional facts or information available regarding that aspect of the vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.