Threats tagged 'ghsa-69c2-7h9f-h4x5'

AzuraCast versions prior to 0.24.0 have a stored CSV formula injection vulnerability. This flaw allows station users with Media permission to inject malicious formulas into metadata fields during bulk media import. When other users export and open these CSV files in spreadsheet software, the formulas can execute, potentially leading to data manipulation or other impacts.