Ltdrdata vulnerabilities
We track 2 vulnerabilities in Ltdrdata products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on December 12, 2024.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest Ltdrdata vulnerabilities
- 8.6 High severity
ComfyUI-Impact-Pack: Path Traversal: '.../...//'
ComfyUI-Impact-Pack is vulnerable to Path Traversal. The issue stems from missing validation of the `image.filename` field in a POST request sent to the `/upload/temp` endpoint added by the extension to the server. This results in writing arbitrary files to th
- 10.0 Critical severity
ComfyUI-Manager: Improper Control of Generation of Code
The issue stems from a missing validation of the pip field in a POST request sent to the /customnode/install endpoint used to install custom nodes which is added to the server by the extension. This allows an attacker to craft a request that triggers a pip ins