CVE-2024-11044 — Open Redirect in automatic1111/stable-diffusion-webui

CVE-2024-11044

Open Redirect in automatic1111/stable-diffusion-webui PUBLISHED

Description (CNA)

An open redirect vulnerability in automatic1111/stable-diffusion-webui version 1.10.0 allows a remote unauthenticated attacker to redirect users to arbitrary websites via a specially crafted URL. This vulnerability can be exploited to conduct phishing attacks, distribute malware, and steal user credentials.

Affected (CNA)

Vendor / product	Versions
automatic1111 / automatic1111/stable-diffusion-webui	affected unspecified through latest

CWE

CWE-601

References

https://huntr.com/bounties/ee942e5e-4987-4f81-ba83-014fec6b33b3

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.