CVE-2024-11044

Executive Summary

CVE-2024-11044 is an open redirect vulnerability in Automatic1111's Stable Diffusion WebUI version 1.10.0. A remote unauthenticated attacker can craft a malicious URL that, when visited by a user, redirects them to an arbitrary external website. This flaw is exploited via the /file= endpoint, where the file parameter is not properly validated. The vulnerability has a CVSS score of 6.1 (Medium) and is weaponized with a public Nuclei template, making it trivial to scan for and exploit. The primary risk is phishing, malware distribution, and credential theft, as users can be tricked into visiting attacker-controlled sites.

Supply Chain & Package Security

This vulnerability affects the Python-based Stable Diffusion WebUI package distributed via GitHub and PyPI. The open redirect is a server-side logic flaw, not a dependency injection. However, the lack of a patch or advisory from the vendor increases supply chain risk, as users may unknowingly run vulnerable versions. Organizations should verify their deployment version and apply any available updates or mitigations.

CVSS Breakdown & Threat Level

• Attack Vector (AV): Network (N) – Exploitable remotely.
• Attack Complexity (AC): Low (L) – No special conditions required.
• Privileges Required (PR): None (N) – No authentication needed.
• User Interaction (UI): Required (R) – Victim must click the crafted link.
• Scope (S): Changed (C) – Redirect can lead to a different security domain.
• Confidentiality (C): Low (L) – Potential credential theft.
• Integrity (I): Low (L) – Redirect can serve malicious content.
• Availability (A): None (N) – No impact on availability.

Threat Level: Medium. The vulnerability is easy to exploit but requires user interaction. The public availability of a Nuclei template increases the threat.

Deep Dive & Mechanics

The vulnerability resides in the /file= endpoint of Stable Diffusion WebUI 1.10.0. The application does not sanitize or validate the URL passed in the file parameter. When a user visits a URL like http://target.com/file=https://attacker.com, the server responds with an HTTP redirect (302) to the attacker-controlled domain. This is a classic open redirect (CWE-601).

The attack flow:

1. Attacker crafts a URL: http://vulnerable-server.com/file=https://malicious-site.com.
2. Attacker sends this link to a victim via email, social media, or other channels.
3. Victim clicks the link, which first goes to the legitimate Stable Diffusion WebUI server.
4. The server returns a redirect to https://malicious-site.com.
5. Victim's browser follows the redirect, landing on the attacker's site, which may host a phishing page or malware.

The Nuclei template confirms the vulnerability by checking for a Location header containing the attacker's domain (e.g., oast.pro).

Vulnerable vs. Patched Code

Vulnerable Code (1.10.0): The /file= endpoint likely uses a simple redirect without validation:

@app.route('/file=<path:url>')
def redirect_file(url):
    return redirect(url)

Patched Code (Hypothetical): A patched version would validate the URL against an allowlist of trusted domains:

from urllib.parse import urlparse

ALLOWED_DOMAINS = ['example.com', 'localhost']

@app.route('/file=<path:url>')
def redirect_file(url):
    parsed = urlparse(url)
    if parsed.netloc in ALLOWED_DOMAINS:
        return redirect(url)
    else:
        return "Invalid redirect", 400

Exploitation & Lab Setup

Red Team

Lab Setup:

1. Deploy Stable Diffusion WebUI 1.10.0 on a local VM (e.g., using Docker: docker run -p 7860:7860 automatic1111/stable-diffusion-webui:1.10.0).
2. Set up a listener to capture redirects (e.g., nc -lvnp 80 or a simple Python HTTP server).

Exploitation: Use the following curl command to test the redirect:

curl -v "http://localhost:7860/file=https://attacker.com"

Expected response includes a Location: https://attacker.com header.

For phishing, craft a link:

http://legitimate-server.com/file=https://phishing-site.com/login

Blue Team

Detection:

• Monitor web server logs for requests to /file= followed by external domains.
• Use the provided Nuclei template to scan for vulnerable instances.
• Deploy a WAF rule to block redirects to untrusted domains.

Hunting: Search for logs containing GET /file=http or GET /file=https and verify the destination.

Indicators of Compromise (IOCs)

• URL Pattern: */file=https://* or */file=http://*
• HTTP Response: 302 redirect with Location header pointing to an external domain.
• Referer Header: May contain the vulnerable server's URL.
• Network Traffic: Outbound connections from the server to arbitrary external hosts.

Detection Engineering

YARA Rule

rule CVE_2024_11044_Open_Redirect {
    meta:
        description = "Detects open redirect attempts in Stable Diffusion WebUI logs"
        author = "Valters IT"
        date = "2025-04-10"
        reference = "CVE-2024-11044"
    strings:
        $redirect = "/file="
        $http = "http://"
        $https = "https://"
    condition:
        $redirect and ($http or $https)
}

Sigma Rule

title: CVE-2024-11044 Open Redirect Detection
id: 7a8b9c0d-1e2f-3a4b-5c6d-7e8f9a0b1c2d
status: experimental
description: Detects open redirect attempts via /file= endpoint in Stable Diffusion WebUI
author: Valters IT
date: 2025-04-10
logsource:
    category: webserver
    product: apache
    service: access
detection:
    selection:
        cs-uri-query|contains: "/file="
        cs-uri-query|contains|any:
            - "http://"
            - "https://"
    condition: selection
falsepositives:
    - Legitimate redirects to allowed domains (if any)
level: medium

Suricata Rule

alert http any any -> any any (msg:"CVE-2024-11044 Stable Diffusion WebUI Open Redirect"; flow:to_server,established; content:"/file="; http_uri; content:"http://"; distance:0; within:100; sid:1000001; rev:1;)

Nuclei Template (Provided)

id: CVE-2024-11044

info:
  name: Stable Diffusion Webui 1.10.0 - Open Redirect
  author: DhiyaneshDK
  severity: medium
  description: |
    An open redirect vulnerability exists in Stable-Diffusion-Webui 1.10.0, where the file parameter in the /file= endpoint can be manipulated to redirect users to malicious websites. This could facilitate phishing attacks by tricking users into visiting attacker-controlled URLs.
  impact: |
    Unauthenticated attackers can redirect users to malicious URLs via the file parameter, facilitating phishing attacks and credential theft.
  remediation: |
    Update Stable Diffusion Webui to a version newer than 1.10.0.
  reference:
    - https://huntr.com/bounties/ee942e5e-4987-4f81-ba83-014fec6b33b3
  classification:
    epss-score: 0.01143
    epss-percentile: 0.78526
  metadata:
    verified: true
    max-request: 1
    fofa-query: body="stable-diffusion-webui"
  tags: cve,cve2024,huntr,redirect,oss,stable_diffusion_webui,automatic1111,vuln

flow: http(1) && http(2)

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    matchers:
      - type: dsl
        dsl:
          - 'contains_any(tolower(body), "stable-diffusion-webui", "k-diffusion", "content=\"stable diffusion")'
        internal: true

  - method: GET
    path:
      - "{{BaseURL}}/file=https://oast.pro"

    matchers:
      - type: regex
        part: header
        regex:
          - '(?m)^(?:Location\s*?:\s*?)(?:https?://|//)?(?:[a-zA-Z0-9\-_\.@]*)oast\.pro.*$'

Remediation & Mitigation

1. Immediate: Disable the /file= endpoint or restrict it to internal use only.
2. Short-term: Implement URL validation to allow only trusted domains (e.g., localhost, the server's own domain).
3. Long-term: Update to a patched version of Stable Diffusion WebUI once available.
4. WAF Rule: Block requests containing /file=http or /file=https unless explicitly allowed.
5. User Awareness: Educate users not to click on suspicious links, even if they appear to point to a trusted server.

Valters IT
Securing Digital Frontiers

{/* [Security Hash: 5F70FE2B8B2B35AA11CE554E] */}