Threats tagged 'ghsa-33qp-f69h-8gcq'

AzuraCast versions up to 0.23.8 have a command injection vulnerability that allows station users with Profile permission to execute arbitrary OS commands. This occurs via injection of shell metacharacters into StereoTool settings fields, which are executed on station restart, potentially compromising the container environment.