iTunesRPC-Remastered is a Discord Rich Presence for iTunes on Windows utility. In affected versions iTunesRPC-Remastered did not properly sanitize image file paths leading to OS level command injection. This issue has been patched in commit cdcd48b. Users are advised to upgrade.
References
Link | Resource |
---|---|
https://github.com/bildsben/iTunesRPC-Remastered/commit/cdcd48bbc44009ddcbd07a809b87376dc9ce37f4 | Patch Third Party Advisory |
https://github.com/bildsben/iTunesRPC-Remastered/security/advisories/GHSA-mjv7-r62p-vhhg | Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: GitHub_M
Published: 2022-02-04T22:32:53
Updated: 2022-02-04T22:32:53
Reserved: 2022-01-19T00:00:00
Link: CVE-2022-23611
JSON object: View
NVD Information
Status : Analyzed
Published: 2022-02-04T23:15:15.670
Modified: 2022-02-11T03:11:43.760
Link: CVE-2022-23611
JSON object: View
Redhat Information
No data.
CWE