CVE-2024-21575CWE-35

ComfyUI-Impact-Pack is vulnerable to Path Traversal

Critical · published December 12, 2024

CVSS v4.0
9.2
EPSS
1%
Percentile
62.5
In the wild
Unconfirmed
What it is

ComfyUI-Impact-Pack is vulnerable to Path Traversal. The issue stems from missing validation of the `image.filename` field in a POST request sent to the `/upload/temp` endpoint added by the extension to the server. This results in writing arbitrary files to the file system which may, under some conditions, result in remote code execution (RCE).

The record
Technical detail
CVSS v4.0
9.2 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N
EPSS
0.01000 · 62.5th percentile
Weakness
CWE-35 · Path Traversal: '.../...//'
Published
2024-12-12T14:14Z
EPSS history
Timeline
  • 12 DEC 14:14Z
    ComfyUI-Impact-Pack is vulnerable to Path Traversal
    cvelistv5