An issue was discovered in badaix Snapcast version 0.27.0, allows remote attackers to execute arbitrary code and gain sensitive information via crafted request in JSON-RPC-API.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Snapcast | Badaix | * | 0.27.0 (including) |
| Snapcast | Ubuntu | focal | * |
| Snapcast | Ubuntu | oracular | * |
| Snapcast | Ubuntu | upstream | * |