Read the docs

AUTOMATIC1111

Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

AUTOMATIC1111 records in CISA KEV

No AUTOMATIC1111 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Stable-diffusion-webui 6 records HIGH

Records

6 records in Stable-diffusion-webui · all components

TI-2024-10233 CVE-2024-11045 · GHSA-6vmm-pmxf-9784

Cross-Site WebSocket Hijacking (CSWSH) in automatic1111/stable-diffusion-webui

Priority HIGH 76

A Cross-Site WebSocket Hijacking (CSWSH) vulnerability in automatic1111/stable-diffusion-webui version 1.10.0 allows an attacker to clone a malicious server extension from a GitHub repository.

CVSS 3.0CRITICAL 9.6 Network No auth User interaction EPSS 0.00413 Published 2025-03-20 No fix listed CWE-284
TI-2024-11481 CVE-2024-12375 · GHSA-q73m-3cg7-m23w

Local File Inclusion in automatic1111/stable-diffusion-webui

Priority MEDIUM 62

A local file inclusion vulnerability was identified in automatic1111/stable-diffusion-webui, affecting version git 82a973c.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00856 Published 2025-03-20 No fix listed CWE-36
TI-2024-11201 CVE-2024-12074 · GHSA-r49j-4jpw-x35c

Denial of Service in automatic1111/stable-diffusion-webui

Priority MEDIUM 62

A Denial of Service (DoS) vulnerability was discovered in the file upload feature of automatic1111/stable-diffusion-webui version 1.10.0.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00836 Published 2025-03-20 No fix listed CWE-400
TI-2024-11480 CVE-2024-12374 · GHSA-f3v2-jc5f-6328

Stored XSS in automatic1111/stable-diffusion-webui

Priority MEDIUM 60

A stored cross-site scripting (XSS) vulnerability exists in automatic1111/stable-diffusion-webui version git 82a973c.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00426 Published 2025-03-20 No fix listed CWE-79
TI-2024-10232 CVE-2024-11044 · GHSA-96w2-hg6w-6xv2

Open Redirect in automatic1111/stable-diffusion-webui

Priority MEDIUM 60

An open redirect vulnerability in automatic1111/stable-diffusion-webui version 1.10.0 allows a remote unauthenticated attacker to redirect users to arbitrary websites via a specially crafted URL.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00845 Published 2025-03-20 No fix listed CWE-601
Open these records in search →