CVE-2022-23603

Katalog CVE

CVSS 6.1 · Medium EPSS 0,99%

Kerentanan Improper Encoding or Escaping of Output pada itunesrpc-remastered project itunesrpc-remastered. Skor CVSS 3.1 6.1 (Medium) menurut NVD.

Deskripsi (NVD)

iTunesRPC-Remastered is a discord rich presence application for use with iTunes & Apple Music. In code before commit 24f43aa user input is not properly sanitized and code injection is possible. Users are advised to upgrade as soon as is possible. There are no known workarounds for this issue.

Rincian

Terbit di NVD

1 Februari 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.1 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-116: Improper Encoding or Escaping of Output

EPSS (30 hari)

0,99% peluang dieksploitasi; lebih tinggi dari 61,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/bildsben/iTunesRPC-Remastered/commit/24f43aac0f4116b3d89fdbe973ba92c6cfb0d998 patch · advisory pihak ketiga
• https://github.com/bildsben/iTunesRPC-Remastered/commit/54b02d9f3a94de94e4fb471908b8cf798e62e411 patch · advisory pihak ketiga
• https://github.com/bildsben/iTunesRPC-Remastered/security/advisories/GHSA-3xpp-rhqx-cw96 patch · advisory pihak ketiga