CVE-2024-12074: Denial of Service in automatic1111/stable-diffusion-webui
A Denial of Service (DoS) vulnerability was discovered in the file upload feature of automatic1111/stable-diffusion-webui version 1.10.0. The vulnerability is due to improper handling of form-data with a large filename in the file upload request. By sending a payload with an excessively large filename, the server becomes overwhelmed and unresponsive, leading to unavailability for legitimate users. This issue can be exploited without authentication, making it highly scalable and increasing the risk of exploitation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-12074?
CVE-2024-12074 has been classified with a severity that indicates it can cause a Denial of Service (DoS).
How do I fix CVE-2024-12074?
To fix CVE-2024-12074, update to the latest version of automatic1111/stable-diffusion-webui that includes a patch for this vulnerability.
What does CVE-2024-12074 affect?
CVE-2024-12074 affects the file upload feature in automatic1111/stable-diffusion-webui version 1.10.0.
How does CVE-2024-12074 exploit the system?
CVE-2024-12074 can exploit the system by sending a file upload request with an excessively large filename, leading to a denial of service.
What are the consequences of not addressing CVE-2024-12074?
If CVE-2024-12074 is not addressed, it may lead to a denial of service, making the system unavailable to users.