← العودة للجدول
CVE-2025-43845
CVE-2025-43845 — Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VI
📅 2025-05-05
🔴 Critical 🔥 No NVD Vulnerability Vulnerability CVSS 9.8 🎯 EPSS 2.21%

📋 الوصف الكامل

Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS. Versions 2.2.231006 and prior are vulnerable to code injection. The ckpt_path2 variable takes user input (e.g. a path to a model) and passes it to change_info_ function, which opens and reads the file on the given path (except it changes the final on the path to train.log), and passes the contents of the

💻 الأنظمة المتأثرة

Retrieval-based-Voice-Conversion-WebUI is a

⚠️ نوع التهديد

Vulnerability

🔗 CVE ID

CVE-2025-43845

📡 المصدر

NVD

✅ الحلول والتخفيف

Update to v2.2.231006

🔗 المصدر الأصلي ← 📘 NVD ← ⚡ CISA KEV ←