CVE-2024-31462

CVSS V2 None CVSS V3 None
Description
stable-diffusion-webui is a web interface for Stable Diffusion, implemented using Gradio library. Stable-diffusion-webui 1.7.0 is vulnerable to a limited file write affecting Windows systems. The create_ui method (Backup/Restore tab) in modules/ui_extensions.py takes user input into the config_save_name variable on line 653. This user input is later used in the save_config_state method and used to create a file path on line 65, which is afterwards opened for writing on line 67, which leads to a limited file write exploitable on Windows systems. This issue may lead to limited file write. It allows for writing json files anywhere on the server where the web server has access.
Overview
  • CVE ID
  • CVE-2024-31462
  • Assigner
  • GitHub_M
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2024-04-12T21:41:46.345Z
  • Last Modified Date
  • 2024-06-04T17:37:23.284Z
Weakness Enumerations
CWE URL
CWE-22 http://cwe.mitre.org/data/definitions/22.html
References
Reference URL Reference Tags
https://securitylab.github.com/advisories/GHSL-2024-010_stable-diffusion-webui/ x_refsource_CONFIRM
https://github.com/AUTOMATIC1111/stable-diffusion-webui/commit/d9708c92b444894bce8070e4dcfaa093f8eb8d43 x_refsource_MISC
https://github.com/AUTOMATIC1111/stable-diffusion-webui/blob/cf2772fab0af5573da775e7437e6acdca424f26e/modules/ui_extensions.py#L59 x_refsource_MISC
https://github.com/AUTOMATIC1111/stable-diffusion-webui/blob/cf2772fab0af5573da775e7437e6acdca424f26e/modules/ui_extensions.py#L646-L660 x_refsource_MISC
https://github.com/AUTOMATIC1111/stable-diffusion-webui/blob/cf2772fab0af5573da775e7437e6acdca424f26e/modules/ui_extensions.py#L65 x_refsource_MISC
https://github.com/AUTOMATIC1111/stable-diffusion-webui/blob/cf2772fab0af5573da775e7437e6acdca424f26e/modules/ui_extensions.py#L653 x_refsource_MISC
https://github.com/AUTOMATIC1111/stable-diffusion-webui/blob/cf2772fab0af5573da775e7437e6acdca424f26e/modules/ui_extensions.py#L67 x_refsource_MISC
https://github.com/AUTOMATIC1111/stable-diffusion-webui/blob/v1.7.0/modules/ui_extensions.py x_refsource_MISC
https://github.com/AUTOMATIC1111/stable-diffusion-webui/discussions/15461 x_refsource_MISC
https://securitylab.github.com/advisories/GHSL-2024-010_stable-diffusion-webui x_refsource_MISC
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2024-31462
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-31462
History
Created Old Value New Value Data Type Notes
2024-06-25 22:51:27 Added to TrackCVE