jvn.jp
https://jvn.jp/en/jp/JVN78335885 CVE-2024-50307
MEDIUM
Record summary
CVE-2024-50307 has a selected CVSS score of 5.5 (medium).
Description
Use of potentially dangerous function issue exists in Chatwork Desktop Application (Windows) versions prior to 2.9.2. If a user clicks a specially crafted link in the application, an arbitrary file may be downloaded from an external website and executed. As a result, arbitrary code may be executed on the device that runs Chatwork Desktop Application (Windows).
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Oct 28, 2024 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Chatwork Desktop Application (Windows)Browse kubell Co., Ltd. / Chatwork Desktop Application (Windows) | CVE List | versions prior to 2.9.2 | affected |
References
2nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2024-50307