Description
OS command injection vulnerability in Nako3edit, editor component of nadesiko3 (PC Version) v3.3.74 and earlier allows a remote attacker to obtain appkey of the product and execute an arbitrary OS command on the product.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| kujirahand | Nako3edit, editor component of nadesiko3 (PC Version) | v3.3.74 and earlier | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | nadesiko3 | < 3.3.75 | 3.3.75 | GHSA-7249-8x22-4rg4 |