Skip to content
iPatch
Search CVEs, vendors, products
/
Log in
Start free
Today
Exploited tracker
Weekly brief
Vendors
How it works
Trust
Pricing
Vendors
/
ltdrdata
/
ComfyUI-Impact-Pack
ltdrdata ComfyUI-Impact-Pack
CVE-2024-21575
High
8.6
ComfyUI-Impact-Pack is vulnerable to Path Traversal. The issue stems from missing validation of the `image.filename` field in a POST request sent to the `/upload/temp` endpoint added by the extension
1.0%