CVE-2024-12882 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

comfyanonymous/comfyui version v0.2.4 suffers from a non-blind Server-Side Request Forgery (SSRF) vulnerability. This vulnerability can be exploited by combinin…
High CVSS: 7.5

CVE-2024-12882

comfyanonymous/comfyui version v0.2.4 suffers from a non-blind Server-Side Request Forgery (SSRF) vulnerability. This vulnerability can be exploited by combining the REST APIs `POST /internal/models/download` and `GET /view`, allowing attackers to abuse the victim server's credentials to access unauthorized web resources.
Vendor
Comfy
Product
Comfyui
CWE
CWE-918
Yayın Tarihi
2025-03-20 10:15:31
Güncelleme
2025-08-01 01:18:23
Source Identifier
security@huntr.dev
KEV Date Added
-

Kategoriler

Referanslar