CVE-2024-12375— Local File Inclusion in automatic1111/stable-diffusion-webui
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-12375
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Local File Inclusion in automatic1111/stable-diffusion-webui
Source: NVD (National Vulnerability Database)
Vulnerability Description
A local file inclusion vulnerability was identified in automatic1111/stable-diffusion-webui, affecting version git 82a973c. This vulnerability allows an attacker to read arbitrary files on the system by sending a specially crafted request to the application.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
绝对路径遍历
Source: NVD (National Vulnerability Database)
Vulnerability Title
Stable Diffusion web UI 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Stable Diffusion web UI是AUTOMATIC1111个人开发者的一个 Web 界面。 Stable Diffusion web UI存在安全漏洞，该漏洞源于特制请求，可能导致本地文件包含攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| automatic1111 | automatic1111/stable-diffusion-webui | unspecified ~ latest | - |
II. Public POCs for CVE-2024-12375
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-12375
请登录查看更多情报信息。
Same Patch Batch · automatic1111 · 2025-03-20 · 6 CVEs total
| CVE-2024-12074 | Denial of Service in automatic1111/stable-diffusion-webui | |
| CVE-2024-12374 | Stored XSS in automatic1111/stable-diffusion-webui | |
| CVE-2024-11044 | Open Redirect in automatic1111/stable-diffusion-webui | |
| CVE-2024-11045 | Cross-Site WebSocket Hijacking (CSWSH) in automatic1111/stable-diffusion-webui | |
| CVE-2024-10935 | Unauthenticated DoS via Multipart Boundary in automatic1111/stable-diffusion-webui |
IV. Related Vulnerabilities
Same product: automatic1111/stable-diffusion-webui
- CVE-2024-12074
Denial of Service in automatic1111/stable-diffusion-webui - CVE-2024-11045
Cross-Site WebSocket Hijacking (CSWSH) in automatic1111/stab - CVE-2024-10935
Unauthenticated DoS via Multipart Boundary in automatic1111/ - CVE-2024-11044
Open Redirect in automatic1111/stable-diffusion-webui - CVE-2024-12374
Stored XSS in automatic1111/stable-diffusion-webui
Same vendor: automatic1111
- CVE-2024-12074
Denial of Service in automatic1111/stable-diffusion-webui - CVE-2024-11045
Cross-Site WebSocket Hijacking (CSWSH) in automatic1111/stab - CVE-2024-10935
Unauthenticated DoS via Multipart Boundary in automatic1111/ - CVE-2024-11044
Open Redirect in automatic1111/stable-diffusion-webui - CVE-2024-12374
Stored XSS in automatic1111/stable-diffusion-webui
Same weakness: CWE-36
- CVE-2026-6418
PaperCut NG/MF: Path Traversal in Shared Account Synchroniza - CVE-2026-44029
Nix 安全漏洞 - CVE-2026-7217
Deepractice PromptX Document File index.ts read_pdf absolute - CVE-2026-34515
AIOHTTP: UNC SSRF/NTLMv2 Credential Theft/Local File Read in - CVE-2026-4373
JetFormBuilder <= 3.5.6.2 - Unauthenticated Arbitrary File R
V. Comments for CVE-2024-12375
No comments yet