CVE-2022-23603

iTunesRPC-Remastered is a discord rich presence application for use with iTunes & Apple Music. In code before commit 24f43aa user input is not properly sanitized and code injection is possible. Users are advised to upgrade as soon as is possible. There are no known workarounds for this issue.

• CWE-116
• CWE-116

• https://github.com/bildsben/iTunesRPC-Remastered/commit/24f43aac0f4116b3d89fdbe973ba92c6cfb0d998Patch, Third Party Advisory
• https://github.com/bildsben/iTunesRPC-Remastered/commit/54b02d9f3a94de94e4fb471908b8cf798e62e411Patch, Third Party Advisory
• https://github.com/bildsben/iTunesRPC-Remastered/security/advisories/GHSA-3xpp-rhqx-cw96Patch, Third Party Advisory
• https://github.com/bildsben/iTunesRPC-Remastered/commit/24f43aac0f4116b3d89fdbe973ba92c6cfb0d998Patch, Third Party Advisory
• https://github.com/bildsben/iTunesRPC-Remastered/commit/54b02d9f3a94de94e4fb471908b8cf798e62e411Patch, Third Party Advisory
• https://github.com/bildsben/iTunesRPC-Remastered/security/advisories/GHSA-3xpp-rhqx-cw96Patch, Third Party Advisory

Published

Feb 1, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-23597Element Desktop is a Matrix client for desktop platforms wit…8.8
• CVE-2022-23598laminas-form is a package for validating and displaying simp…6.1
• CVE-2022-23599Products.ATContentTypes are the core content types for Plone…6.1
• CVE-2022-23600fleet is an open source device management, built on osquery.…6.5
• CVE-2022-23601Symfony is a PHP framework for web and console applications …8.8
• CVE-2022-23602Nimforum is a lightweight alternative to Discourse written i…8.1
• CVE-2022-23604x26-Cogs is a repository of cogs made by Twentysix for the R…7.2
• CVE-2022-23605Wire webapp is a web client for the wire messaging protocol.…2.3
• CVE-2022-23606Envoy is an open source edge and service proxy, designed for…6.5
• CVE-2022-23607treq is an HTTP library inspired by requests but written on …6.5
• CVE-2022-23608PJSIP is a free and open source multimedia communication lib…9.8
• CVE-2022-23609iTunesRPC-Remastered is a Discord Rich Presence for iTunes o…9.1