What is CVE-2022-23603?

CVE-2022-23603 is a critical-severity vulnerability in Itunesrpc-Remastered Project, classified under Improper Encoding or Escaping of Output. CVSS score: 9.9/10. Published 2022-02-01.

How severe is CVE-2022-23603?

Critical severity. CVSS v3 base score is 9.9 out of 10.

Vulnerability in Itunesrpc-Remastered Project

CVE-2022-23603

iTunesRPC-Remastered is a discord rich presence application for use with iTunes & Apple Music. In code before commit 24f43aa user input is not properly sanitized and code injection is possible. Users are advised to upgrade as soon as is possible. There are no known workarounds for this issue.

EPSS: 0.010 (59.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.9 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L.

Affected products

Itunesrpc-remastered_project Itunesrpc-remastered
N/a — versions n/a

Weakness classification (CWE)

CWE-116 — Improper Encoding or Escaping of Output

References

security-advisories@github.com (x_refsource_CONFIRM, Patch, Third Party Advisory)
security-advisories@github.com (Patch, Third Party Advisory, x_refsource_MISC)
security-advisories@github.com (Patch, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2022-23603?: CVE-2022-23603 is a critical-severity vulnerability in Itunesrpc-Remastered Project, classified under Improper Encoding or Escaping of Output. CVSS score: 9.9/10. Published 2022-02-01.
How severe is CVE-2022-23603?: Critical severity. CVSS v3 base score is 9.9 out of 10.