CVE-2024-50307mediumCWE-676

CVE-2024-50307: falha de média gravidade em kubell Co., Ltd. Chatwork Desktop Application…

Publicada em

Seguir esta CVE+ Monitorar Chatwork Desktop Application

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.5epss 0.3%
Use of potentially dangerous function issue exists in Chatwork Desktop Application (Windows) versions prior to 2.9.2. If a user clicks a specially crafted link in the application, an arbitrary file may be downloaded from an external website and executed. As a result, arbitrary code may be executed on the device that runs Chatwork Desktop Application (Windows).
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
Produtos afetados
kubell Co., Ltd. · Chatwork Desktop Application (Windows)