Skip to content
OpenAdvisories
Critical · 9.8 CVE-2022-42496 EUVD-2022-7547GHSA-7249-8x22-4rg4

nadesiko3 vulnerable to OS Command Injection

Published Dec 5, 2022 · Updated Apr 24, 2025 · Assigned by jpcert

Description

OS command injection vulnerability in Nako3edit, editor component of nadesiko3 (PC Version) v3.3.74 and earlier allows a remote attacker to obtain appkey of the product and execute an arbitrary OS command on the product.

Affected products

VendorProductAffectedFixed
kujirahand Nako3edit, editor component of nadesiko3 (PC Version) v3.3.74 and earlier —

Affected packages

EcosystemPackageAffectedFixedRecord
npm nadesiko3 < 3.3.75 3.3.75 GHSA-7249-8x22-4rg4

References