Ikkyu3

**Name of the Vulnerable Software and Affected Versions** AzuraCast versions prior to 0.23.8 **Description** The public On-Demand download endpoint fails to verify playlist-level access controls. This allows unauthenticated users to bypass intended access restrictions by directly requesting media via the download endpoint using valid media identifiers, which can expose private or restricted audio content that was excluded from On-Demand-enabled playlists. **Recommendations** Update to version 0.23.8 or later.