ltdrdata

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

ltdrdata records in CISA KEV

No ltdrdata vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2024-14308 CVE-2024-21574 · GHSA-7p9r-9x76-5h9r

Code injection in ltdrdata ComfyUI-Manager

MEDIUM 51

The issue stems from a missing validation of the pip field in a POST request sent to the /customnode/install endpoint used to install custom nodes which is added to the server by the extension.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01139 Published 2024-12-12 Fixed in 2.51.1 CWE-94

TI-2024-14309 CVE-2024-21575 · GHSA-6mx8-m8xp-f2vc

Path traversal in ltdrdata ComfyUI-Impact-Pack

MEDIUM 48

ComfyUI-Impact-Pack is vulnerable to Path Traversal.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.01 Published 2024-12-12 Fixed in 7.6.2 CWE-35

Open these records in search →

Critical	2
High	0
Medium	0
Low	0
No CVSS	0