Vulnerability · Published Feb 4, 2022 · Assigned by GitHub_M
CVE-2022-23609Path traveresal in iTunesRPC-Remastered
High 8.3
In plain English
A high-severity path traversal in iTunesRPC-Remastered from bildsben. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 64% of all known vulnerabilities).
Severity (CVSS 3.1)8.3High
Exploit odds (30 days)1.0%top 35.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
iTunesRPC-Remastered is a Discord Rich Presence for iTunes on Windows utility. In affected versions iTunesRPC-Remastered did not properly sanitize user input used to remove files leading to file deletion only limited by the process permissions. Users are advised to upgrade as soon as possible.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| bildsben | iTunesRPC-Remastered | commits prior to 1eb1e54 |
Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L