[错误]: 自定义内部路由在没有 gradio-auth 登录的情况下暴露配置
作者: REYu6创建于 2026年9月21日更新于 2026年9月22日
标签bug-report
Deploy (build + start container + ready)
MSYS_NO_PATHCONV=1 wsl.exe -d Ubuntu-24.04 -- bash -lc 'cd /mnt/f/Disassertation/PySAST/PySAST-repro/unresolved-repro/01-sdwebui-gradio-auth/fullstack && bash deploy_fullstack.sh 2>&1 | tee build_runtime.log'
Exploit (hostless attack process, go to mapped port 18601, evidence dump evidence/)
MSYS_NO_PATHCONV=1 wsl.exe -d Ubuntu-24.04 -- bash /mnt/f/Disassertation/PySAST/PySAST-repro/unresolved-repro/01-sdwebui-gradio-auth/fullstack/exploit_f006.sh
内容来源: AUTOMATIC1111/stable-diffusion-webui