CVE-2024-50307

Oct. 28, 2024, 1:58 p.m.

5.5
Medium

Description

Use of potentially dangerous function issue exists in Chatwork Desktop Application (Windows) versions prior to 2.9.2. If a user clicks a specially crafted link in the application, an arbitrary file may be downloaded from an external website and executed. As a result, arbitrary code may be executed on the device that runs Chatwork Desktop Application (Windows).

Product(s) Impacted

Product Versions
Chatwork Desktop Application (Windows)
  • ['before 2.9.2']

Weaknesses

Common security weaknesses mapped to this vulnerability.

CWE-676
Use of Potentially Dangerous Function
The product invokes a potentially dangerous function that could introduce a vulnerability if it is used incorrectly, but the function can also be used safely.

References

https://jvn.jp/en/jp/JVN78335885/

Tags

vultures@jpcert.or.jp
CWE-676
2024-10-28
CVE-2024-50307

CVSS Score

5.5 / 10

CVSS Data - 3.1

  • Attack Vector: NETWORK
  • Attack Complexity: LOW
  • Privileges Required: LOW
  • Scope: UNCHANGED
  • Confidentiality Impact: LOW
  • Integrity Impact: LOW
  • Availability Impact: LOW

    • CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

    View Vector String

Timeline

Published: Oct. 28, 2024, 5:15 a.m.
Last Modified: Oct. 28, 2024, 1:58 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

vultures@jpcert.or.jp

*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.