CVE-2024-32025: falha crítica em bmaltais kohya_ss
Kohya_ss is vulnerable to a command injection in `group_images_gui.py` (`GHSL-2024-021`)
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.1epss 2.5%
Kohya_ss is a GUI for Kohya's Stable Diffusion trainers. Kohya_ss is vulnerable to a command injection in `group_images_gui.py`. This vulnerability is fixed in 23.1.5.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Produtos afetados
bmaltais · kohya_ssCVEs relacionadas — bmaltais kohya_ss
No mesmo produto, das mais perigosas para as menos.
CVE-2024-32022CRITICALKohya_ss is vulnerable to a command injection in basic_caption_gui.py (GHSL-2024-019)EPSS 3.1%CVE-2024-32027CRITICALKohya_ss is vulnerable to a command injection in `finetune_gui.py` (`GHSL-2024-022`)EPSS 3.0%CVE-2024-32026CRITICALKohya_ss is vulnerable to a command injection in `git_caption_gui.py` (`GHSL-2024-020`)EPSS 3.0%CVE-2024-32024MEDIUMKohya_ss vulenrable to path injection in `common_gui.py` `add_pre_postfix` function (`GHSL-2024-023`)EPSS 0.7%CVE-2024-32023MEDIUMKohya_ss vulnerable to path injection in `common_gui.py` `find_and_replace` function (`GHSL-2024-024`)EPSS 0.7%