CVE-2024-50307CWE-676

Use of potentially dangerous function issue exists in Chatwork Desktop Application (Windows) versions prior to 2.9.2

Medium · published October 28, 2024

CVSS v3.0
5.5
EPSS
0%
Percentile
19.2
In the wild
Unconfirmed
What it is

Use of potentially dangerous function issue exists in Chatwork Desktop Application (Windows) versions prior to 2.9.2. If a user clicks a specially crafted link in the application, an arbitrary file may be downloaded from an external website and executed. As a result, arbitrary code may be executed on the device that runs Chatwork Desktop Application (Windows).

The record
Technical detail
CVSS v3.0
5.5 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00278 · 19.2th percentile
Weakness
CWE-676 · Use of Potentially Dangerous Function
Published
2024-10-28T04:28Z
EPSS history
Timeline
  • 28 OCT 04:28Z
    Use of potentially dangerous function issue exists in Chatwork Desktop Application (Windows) versions prior to 2.9.2
    cvelistv5