CVE-2024-50307

Published: Oct 28, 2024Modified: Jun 17, 2026Deferred

5.5

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Exploitability: 2.1 / Impact: 3.4

Source: vultures@jpcert.or.jp (Secondary)

Description

Use of potentially dangerous function issue exists in Chatwork Desktop Application (Windows) versions prior to 2.9.2. If a user clicks a specially crafted link in the application, an arbitrary file may be downloaded from an external website and executed. As a result, arbitrary code may be executed on the device that runs Chatwork Desktop Application (Windows).

Related CWEs

CWE-676

Use of Potentially Dangerous Function

The product invokes a potentially dangerous function that could introduce a vulnerability if it is used incorrectly, but the function can also be used safely.

References (1)

https://jvn.jp/en/jp/JVN78335885/

Source: vultures@jpcert.or.jp

Timeline

No history available yet.