Skip to content
OpenAdvisories
High · 7.5 CVE-2022-41777 EUVD-2022-7765GHSA-x2jx-w3wm-9p3p

nadesiko3 allows remote attacker to inject invalid value to decodeURIComponent of nako3edit

Published Dec 5, 2022 · Updated Apr 24, 2025 · Assigned by jpcert

Description

Improper check or handling of exceptional conditions vulnerability in Nako3edit, editor component of nadesiko3 (PC Version) v3.3.74 and earlier allows a remote attacker to inject an invalid value to decodeURIComponent of nako3edit, which may lead the server to crash.

Affected products

VendorProductAffectedFixed
kujirahand Nako3edit, editor component of nadesiko3 (PC Version) v3.3.74 and earlier —

Affected packages

EcosystemPackageAffectedFixedRecord
npm nadesiko3 < 3.3.75 3.3.75 GHSA-x2jx-w3wm-9p3p

References