Skip to content
OpenAdvisories
High · 8.1 CVE-2022-23611 EUVD-2022-28580

OS command injection in iTunesRPC-Remastered

Published Feb 4, 2022 · Updated Apr 23, 2025 · Assigned by GitHub_M

Description

iTunesRPC-Remastered is a Discord Rich Presence for iTunes on Windows utility. In affected versions iTunesRPC-Remastered did not properly sanitize image file paths leading to OS level command injection. This issue has been patched in commit cdcd48b. Users are advised to upgrade.

Affected products

VendorProductAffectedFixed
bildsben iTunesRPC-Remastered Commits prior to cdcd48b —

References