💣Exploit CVE-2024-39686 - Bert-VITS2 OS Command Injection

[Mental_Outlaw]

CVE ID : CVE-2024-39686
Published : July 22, 2024, 4:15 p.m. | 2 days, 13 hours ago
Description : Bert-VITS2 is the VITS2 Backbone with multilingual bert. User input supplied to the data_dir variable is used directly in a command executed with subprocess.run(cmd, shell=True) in the bert_gen function, which leads to arbitrary command execution. This affects fishaudio/Bert-VITS2 2.3 and earlier.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Reply if you wish me to write a poc tools of this exploit for you.