Vulnerabilities > CVE-2023-46315 - Unspecified vulnerability in Zanllp Stable Diffusion Webui Infinite Image Browsing
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
NONE Availability impact
NONE Summary
The zanllp sd-webui-infinite-image-browsing (aka Infinite Image Browsing) extension before 977815a for stable-diffusion-webui (aka Stable Diffusion web UI), if Gradio authentication is enabled without secret key configuration, allows remote attackers to read any local file via /file?path= in the URL, as demonstrated by reading /proc/self/environ to discover credentials.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |