low3.3
CVE-2024-32944
Path traversal vulnerability exists in UTAU versions prior to v0.4.19.
Impact
Path traversal vulnerability exists in UTAU versions prior to v0.4.19. If a user of the product installs a crafted UTAU voicebank installer (.uar file, .zip file) to UTAU, an arbitrary file may be placed.
Affected products
| Product | Affected versions |
|---|---|
| UTAU | before 0.4.19. |
Versions were read from the advisory text. No structured product data has been published for this record yet.