CVE-2024-39686 fishaudio/Bert-VITS2 Command Injection in webui_preprocess.py bert_gen function

🗓️ 22 Jul 2024 15:17:16Reported by GitHub_MType

Command Injection in Bert-VITS2 webui_preprocess.p

Reporter	Title	Published	Views	Family All 4
CVE	CVE-2024-39686	22 Jul 202416:15	–	cve
NVD	CVE-2024-39686	22 Jul 202416:15	–	nvd
Vulnrichment	CVE-2024-39686 fishaudio/Bert-VITS2 Command Injection in webui_preprocess.py bert_gen function	22 Jul 202415:16	–	vulnrichment
OSV	CVE-2024-39686	22 Jul 202416:15	–	osv

[
  {
    "vendor": "FishAudio",
    "product": "Bert-VITS2",
    "versions": [
      {
        "version": "<= 2.3",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/fishaudio/Bert-VITS2/blob/3f8c537f4aeb281df3fb3c455eed9a1b64871a81/webui_preprocess.py
securitylab	www.securitylab.github.com/advisories/GHSL-2024-045_GHSL-2024-047_fishaudio_Bert-VITS2/
github	www.github.com/fishaudio/Bert-VITS2/blob/76653b5b6d657143721df2ed6c5c246b4b1d9277/webui_preprocess.py

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

22 Jul 2024 15:16Current

CVSS39.8

EPSS0.00071

CWE-78