CVE-2024-12882
SSRF in comfyanonymous/comfyui
概要
SSRF in comfyanonymous/comfyui
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
comfyanonymous/comfyui version v0.2.4 suffers from a non-blind Server-Side Request Forgery (SSRF) vulnerability. This vulnerability can be exploited by combining the REST APIs POST /internal/models/download and GET /view, allowing attackers to abuse the victim server's credentials to access unauthorized web resources.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web huntr.com