CVE-2024-21575

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-21575

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-21575.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-21575

Published

2024-12-12T14:14:29Z

Modified

2026-10-28T02:31:04Z

Severity

9.2 (Critical) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N CVSS Calculator

Summary

[none]

Details

ComfyUI-Impact-Pack is vulnerable to Path Traversal. The issue stems from missing validation of the image.filename field in a POST request sent to the /upload/temp endpoint added by the extension to the server. This results in writing arbitrary files to the file system which may, under some conditions, result in remote code execution (RCE).

Database specific

{
    "cna_assigner": "snyk",
    "cwe_ids": [
        "CWE-35"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/21xxx/CVE-2024-21575.json"
}

References

Affected packages

Git / github.com/ltdrdata/comfyui-impact-pack

Affected ranges

Type

GIT

Repo

https://github.com/ltdrdata/comfyui-impact-pack

Events

Introduced

Fixed

a43dae373e648ae0f0cc0c9768c3cea6a72acff7

Database specific

Show details

{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "fixed": "7.6.2"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandardRange"
        },
        {
            "range": [
                {
                    "fixed": "a43dae373e648ae0f0cc0c9768c3cea6a72acff7"
                }
            ],
            "source": "REFERENCES_COMMIT"
        }
    ]
}

Affected versions

5.*

5.18.13

5.18.14

5.18.15

5.18.16

6.*

6.0

6.0.1

6.0.2

6.0.3

7.*

7.0

7.1

7.2.1

7.3

7.3.1

7.3.2

7.4.2

7.4.4

7.4.5

7.5

7.5.1

7.5.2

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-21575.json"