Description
Stable Diffusion web UI 存在远程代码执行漏洞，攻击者可未授权访问后台并安装extention导致远程代码执行。
Stable Diffusion web UI Install from URL 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
http://loudong.org.cn/?thread-33.htm
https://qkl.seebug.org/vuldb/ssvid-99773
https://www.sxxdckj.com/cms/a/Stable-Diffusion-WebUI-yuan-cheng-ming-ling-zhi-lou-dong.html
https://cloud.tencent.com/developer/article/2494177
https://github.com/AUTOMATIC1111/stable-diffusion-webui/discussions/7927
https://avd.aliyun.com/detail?id=AVD-2024-11045