PT-2024-10340 · Unknown · Imaginairy

Published 2024-10-20 · Updated 2025-03-22 · CVE-2024-12761

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions imaginAIry (affected versions not specified)

Description The issue is related to the imaginAIry image and video generator based on artificial intelligence. It involves a denial of service due to uncontrolled resource consumption when processing the /api/stablestudio/generate API endpoint. An attacker can exploit this issue by sending a specially crafted request, potentially causing a service disruption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

BDU:2025-00820

CVE-2024-12761

GHSA-X5XW-28W4-53J5

Affected Products

Imaginairy

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-12761 · Security Note
• https://bdu.fstec.ru/vul/2025-00820 · Security Note
• https://osv.dev/vulnerability/GHSA-x5xw-28w4-53j5 · Vendor Advisory
• https://github.com/brycedrennan/imaginAIry · Note
• https://huntr.com/bounties/282900f4-2498-42c4-8ce7-ba5368aaf035 · Note
• https://twitter.com/CVEnew/status/1903336836849922285 · Twitter Post