漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
stakira OpenUtau ZIP Archive VoicebankInstaller.cs VoicebankInstaller path traversal
Vulnerability Description
A vulnerability was found in stakira OpenUtau. It has been classified as critical. This affects the function VoicebankInstaller of the file OpenUtau.Core/Classic/VoicebankInstaller.cs of the component ZIP Archive Handler. The manipulation leads to path traversal. Upgrading to version 0.0.991 is able to address this issue. The identifier of the patch is 849a0a6912aac8b1c28cc32aa1132a3140caff4a. It is recommended to upgrade the affected component. The identifier VDB-217617 was assigned to this vulnerability.
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Vulnerability Title
OpenUtau 路径遍历漏洞
Vulnerability Description
OpenUtau是StAkira个人开发者的一个具有现代用户体验的 UTAU 社区的开源编辑环境。 stakira OpenUtau 0.0.991之前版本存在路径遍历漏洞，该漏洞源于组件 ZIP 存档处理程序的文件 OpenUtau.Core/Classic/VoicebankInstaller.cs 的函数 VoicebankInstaller， 操纵导致路径遍历。
CVSS Information
N/A
Vulnerability Type
N/A