CVE-2024-12882
comfyanonymous/comfyui version v0.2.4 suffers from a non-blind Server-Side Request Forgery (SSRF) vulnerability. This vulnerability can be exploited by combining the REST APIs `POST /internal/models/download` and `GET /view`, allowing attackers to abuse the victim server's credentials to access unauthorized web resources.
Vendor
Product
CWE
Yayın Tarihi
2025-03-20 10:15:31
Güncelleme
2025-08-01 01:18:23
Source Identifier
security@huntr.dev
KEV Date Added
-