Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
stakira OpenUtau ZIP Archive VoicebankInstaller.cs VoicebankInstaller path traversal
Vulnerability Description
A vulnerability was found in stakira OpenUtau. It has been classified as critical. This affects the function VoicebankInstaller of the file OpenUtau.Core/Classic/VoicebankInstaller.cs of the component ZIP Archive Handler. The manipulation leads to path traversal. Upgrading to version 0.0.991 is able to address this issue. The identifier of the patch is 849a0a6912aac8b1c28cc32aa1132a3140caff4a. It is recommended to upgrade the affected component. The identifier VDB-217617 was assigned to this vulnerability.
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Vulnerability Title
OpenUtau 路径遍历漏洞
Vulnerability Description
OpenUtau是StAkira个人开发者的一个具有现代用户体验的 UTAU 社区的开源编辑环境。 stakira OpenUtau 0.0.991之前版本存在路径遍历漏洞，该漏洞源于组件 ZIP 存档处理程序的文件 OpenUtau.Core/Classic/VoicebankInstaller.cs 的函数 VoicebankInstaller， 操纵导致路径遍历。
CVSS Information
N/A
Vulnerability Type
N/A