Skip to content
OpenAdvisories
Medium · 5.5 CVE-2024-50307 EUVD-2024-44807GHSA-9f82-h4f2-23mg

Use of potentially dangerous function issue exists in Chatwork Desktop Application (Windows) versions prior to 2.9.2. If a user clicks a sp…

Published Oct 28, 2024 · Updated Oct 28, 2024 · Assigned by jpcert

Description

Use of potentially dangerous function issue exists in Chatwork Desktop Application (Windows) versions prior to 2.9.2. If a user clicks a specially crafted link in the application, an arbitrary file may be downloaded from an external website and executed. As a result, arbitrary code may be executed on the device that runs Chatwork Desktop Application (Windows).

Affected products

VendorProductAffectedFixed
kubell Chatwork Desktop Application (Windows) versions prior to 2.9.2 —

References