Security Advisory

CVE-2024-28886

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-05-28 03:11:18
Last updated 2024-08-02 01:03:50
Assigner jpcert
State PUBLISHED

Description

OS command injection vulnerability exists in UTAU versions prior to v0.4.19. If a user of the product opens a crafted UTAU project file (.ust file), an arbitrary OS command may be executed.