8 matches found
CVE-2024-21575
ComfyUI-Impact-Pack is vulnerable to Path Traversal. The issue stems from missing validation of the image.filename field in a POST request sent to the /upload/temp endpoint added by the extension to the server. This results in writing arbitrary files to the file system which may, under some...
CVE-2024-21575
ComfyUI-Impact-Pack is vulnerable to Path Traversal. The issue stems from missing validation of the image.filename field in a POST request sent to the /upload/temp endpoint added by the extension to the server. This results in writing arbitrary files to the file system which may, under some...
CVE-2024-21575
ComfyUI-Impact-Pack is vulnerable to Path Traversal. The issue stems from missing validation of the image.filename field in a POST request sent to the /upload/temp endpoint added by the extension to the server. This results in writing arbitrary files to the file system which may, under some...
CVE-2024-21575
CVE-2024-21575 affects ComfyUI-Impact-Pack. Root cause: missing validation of image.filename in the POST /upload/temp endpoint, enabling path traversal and arbitrary file writes on the server. Consequence: under some conditions this can lead to remote code execution (RCE). CVSS vectors indicate h...
CVE-2024-21575
ComfyUI-Impact-Pack is vulnerable to Path Traversal. The issue stems from missing validation of the image.filename field in a POST request sent to the /upload/temp endpoint added by the extension to the server. This results in writing arbitrary files to the file system which may, under some...
CVE-2024-21575: Path Traversal: '.../...//'
ComfyUI-Impact-Pack is vulnerable to Path Traversal. The issue stems from missing validation of the image.filename field in a POST request sent to the /upload/temp endpoint added by the extension to the server. This results in writing arbitrary files to the file system which may, under some...
ComfyUI-Impact-Pack 产品安全漏洞
ComfyUI-Impact-Pack is a custom node pack for ComfyUI by the individual developer of Dr.Lt.Data. A security vulnerability exists in ComfyUI-Impact-Pack that stems from a lack of field validation, is susceptible to path traversal attacks, can lead to writing arbitrary files to the file system, and...
PT-2024-18966 · Unknown · Comfyui-Impact-Pack
Name of the Vulnerable Software and Affected Versions: ComfyUI-Impact-Pack affected versions not specified Description: The issue stems from missing validation of the image.filename field in a POST request sent to the "/upload/temp" endpoint, resulting in writing arbitrary files to the file syste...