Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/12 12:00 a.m.•2 views

CVE-2024-21575: Path Traversal: '.../...//'

ComfyUI-Impact-Pack is vulnerable to Path Traversal. The issue stems from missing validation of the image.filename field in a POST request sent to the /upload/temp endpoint added by the extension to the server. This results in writing arbitrary files to the file system which may, under some...

9.2CVSS6.4AI score0.01EPSS
SaveExploits0References1
Rows per page
Query Builder