Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-86353
HistoryNov 30, 2022 - 12:00 a.m.

Russound XSourcePlayer Code Execution Vulnerability

2022-11-3000:00:00
China National Vulnerability Database
www.cnvd.org.cn
19
russound
xsourceplayer
code execution
vulnerability
audio player
russound inc
version 777d v06.08.03
scriptrunner.cgi
arbitrary code

EPSS

0.006

Percentile

78.5%

XSourcePlayer is an audio player from Russound, Inc. A code execution vulnerability exists in Russound XSourcePlayer version 777D v06.08.03, which stems from a failure of the scriptRunner.cgi component to properly filter the special elements of the constructed code segment. An attacker could exploit the vulnerability to execute arbitrary code.

EPSS

0.006

Percentile

78.5%

Related for CNVD-2022-86353