automatic1111 Stable Diffusion WebUI Denial-of-Service Vulnerability in File Upload Feature

A denial-of-service vulnerability has been identified in the file upload feature of automatic1111/stable-diffusion-webui version 1.10.0. This issue arises from improper handling of form-data containing large filenames in upload requests. When a payload with an excessively large filename is sent, the server becomes overwhelmed and unresponsive, causing a disruption in service for legitimate users. The vulnerability can be exploited without authentication, which enhances its scalability and potential impact.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the server to become unresponsive and unavailable to legitimate users.