Denial of Service Vulnerability in automatic1111/stable-diffusion-webui

CVE-2024-10935

What is CVE-2024-10935?

The automatic1111/stable-diffusion-webui version 1.10.0 contains a flaw where excessive characters appended to multipart boundaries can lead to a denial of service (DoS). This vulnerability allows an attacker to send malformed multipart requests, resulting in resource exhaustion that affects all users. Notably, the attack can be executed without authentication, making it easier for malicious entities to exploit.

References