Description
Sakura Editor provided by Sakura Editor Development Community contains an OS command injection vulnerability. If a victim user is directed to edit a file in a crafted directory, arbitrary OS command may be executed on the user's PC when the user invokes "Open Terminal".
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Sakura Editor Development Community | Sakura Editor | < 2.4.3 | 2.4.3 |