Stable Diffusion WebUI (AUTOMATIC1111) limited file write on Windows
Date: 2024-04
Affected: AUTOMATIC1111/stable-diffusion-webui 1.7.0 (Windows)
Attack vector: path-traversal
Category: real-world
Severity: High
CVE: CVE-2024-31462
CWE: CWE-22
CVSS: 7.5 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)

stable-diffusion-webui 1.7.0 is vulnerable to limited file write affecting Windows systems. The create_ui method takes user input into config_save_name, later used to create a file path, allowing JSON file writes anywhere the web-server has access.


Mitigations:

Architectural layers (MAESTRO):