Approved changes feed: RSS · Atom

cpe:2.3:a:automatic1111:stable-diffusion-webui:2024-07-27:*:*:*:*:*:*:*

part: a version: 2024-07-27 update: *

VendorAutomatic1111 (74c2c939-fb45-5d03-9560-740b351f73e8)
ProductStable Diffusion Webui (c93e4b28-00df-5cc8-ad72-a9e3080226a8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/automatic1111/stable-diffusion-webui purl2cpe 2026-08-13 06:19:51.216184

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-12375 vulnerable 2026-06-08 06:23:51.822068 Local File Inclusion in automatic1111/stable-diffusion-webui
MEDIUM (6.5)
A local file inclusion vulnerability was identified in automatic1111/stable-diffusion-webui, affecting version git 82a973c. This vulnerability allows an attacker to read arbitrary files on the system by sending a specially crafted request to the application.
Published: 2025-03-20T10:10:02.746Z
Updated: 2025-03-20T14:36:35.294Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12374 vulnerable 2026-06-08 06:23:51.821558 Stored XSS in automatic1111/stable-diffusion-webui
MEDIUM (6.1)
A stored cross-site scripting (XSS) vulnerability exists in automatic1111/stable-diffusion-webui version git 82a973c. An attacker can upload an HTML file, which the application interprets as content-type application/html. If a victim accesses the malicious link, it will execute arbitrary JavaScript in the victim's browser.
Published: 2025-03-20T10:08:49.639Z
Updated: 2025-03-20T19:02:09.492Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.