Vulnerability · Published Oct 28, 2024 · Assigned by jpcert
CVE-2024-50307
Medium 5.5
In plain English
A medium-severity security flaw in Chatwork Desktop Application (Windows) from kubell Co., Ltd.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 20% of all known vulnerabilities).
Official description
Use of potentially dangerous function issue exists in Chatwork Desktop Application (Windows) versions prior to 2.9.2. If a user clicks a specially crafted link in the application, an arbitrary file may be downloaded from an external website and executed. As a result, arbitrary code may be executed on the device that runs Chatwork Desktop Application (Windows).
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| kubell Co., Ltd. | Chatwork Desktop Application (Windows) | versions prior to 2.9.2 |
Weakness: CWE-676 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L