Skip to content
OpenAdvisories

Vendor

AUTOMATIC1111

12 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.5

    Stable Diffusion WebUI Credential Disclosure via /sdapi/v1/cmd-flags

    Stable Diffusion WebUI through 1.10.1 contains a credential disclosure vulnerability in the /sdapi/v1/cmd-flags endpoint that returns parsed command-line arguments including gradio_auth and api_auth values in cleartext. Unauthenticated attackers can access th…

  • High 7.5

    Unauthenticated DoS via Multipart Boundary in automatic1111/stable-diffusion-webui

    automatic1111/stable-diffusion-webui version 1.10.0 contains a vulnerability where the server fails to handle excessive characters appended to the end of multipart boundaries. This flaw can be exploited by sending malformed multipart requests with arbitrary c…