CVE-2022-23611CWE-78

OS command injection in iTunesRPC-Remastered

High · published February 4, 2022

CVSS v3.1

8.1

EPSS

Percentile

72.3

In the wild

Unconfirmed

What it is

iTunesRPC-Remastered is a Discord Rich Presence for iTunes on Windows utility. In affected versions iTunesRPC-Remastered did not properly sanitize image file paths leading to OS level command injection. This issue has been patched in commit cdcd48b. Users are advised to upgrade.

The record

Technical detail

CVSS v3.1: 8.1 · HIGH
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:H
CVSS v4.0: Not supplied
EPSS: 0.01401 · 72.3th percentile
Weakness: CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published: 2022-02-04T22:32Z

EPSS history

Timeline

04 FEB 22:32Z
OS command injection in iTunesRPC-Remastered
cvelistv5