Denial of Service Vulnerability in Automatic1111 Stable Diffusion Web UI

CVE-2024-12074

What is CVE-2024-12074?

A Denial of Service vulnerability exists in the file upload feature of version 1.10.0 of the Automatic1111 Stable Diffusion Web UI. This issue arises from improper handling of form-data when a request includes a excessively large filename. An attacker can exploit this vulnerability by sending a payload that overwhelms the server, rendering it unresponsive. This condition prevents legitimate users from accessing the service, and because the exploit does not require authentication, it poses a significant risk of widespread abuse.

References