CVE-2024-50307
Medium
Description
Use of potentially dangerous function issue exists in Chatwork Desktop Application (Windows) versions prior to 2.9.2. If a user clicks a specially crafted link in the application, an arbitrary file may be downloaded from an external website and executed. As a result, arbitrary code may be executed on the device that runs Chatwork Desktop Application (Windows).
SeverityMedium
CVSS5.5
Exploit probability—
ProductChatwork Desktop Application (Windows)
PublishedOct 28, 2024
First seenOct 28, 2024
Weakness typeCWE-676CWE-676
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kubell Co., Ltd. Chatwork Desktop Application (Windows) | versions prior to 2.9.2 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.