CVE-2024-21575 | THREATINT

Description

ComfyUI-Impact-Pack is vulnerable to Path Traversal. The issue stems from missing validation of the `image.filename` field in a POST request sent to the `/upload/temp` endpoint added by the extension to the server. This results in writing arbitrary files to the file system which may, under some conditions, result in remote code execution (RCE).

Reserved 2023-12-22 | Published 2024-12-12 | Updated 2024-12-12 | Assigner snyk

CRITICAL: 9.2CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:NHIGH: 8.6CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Problem types

Path Traversal

Product status

Any version before 7.6.2

affected

Credits

Raul Onitza-Klugman (Snyk Security Research)

References

github.com/...ommit/a43dae373e648ae0f0cc0c9768c3cea6a72acff7

github.com/...b41a7a3465c05a/modules/impact/impact_server.py

cve.org (CVE-2024-21575)

nvd.nist.gov (CVE-2024-21575)

Download JSON