Skip to content
Threat Feed
Subscribe

Tag

Web-Api

2 briefs RSS
high threat

Credential Disclosure in Stable Diffusion WebUI via /sdapi/v1/cmd-flags

Stable Diffusion WebUI versions 1.10.1 and earlier contain a credential disclosure vulnerability allowing unauthenticated remote attackers to retrieve cleartext authentication credentials.

exploited Stable Diffusion WebUI vulnerability credential-disclosure web-api
1r 2t 1c
high advisory

Authorization Bypass in Splunk AI Toolkit

Splunk AI Toolkit versions prior to 6.0.0 are vulnerable to an authorization bypass where low-privileged users can perform unauthorized administrative actions via the REST API.

Splunk AI Toolkit privilege-escalation splunk web-api
1t 1c