Vulnerability · Published Jun 13, 2023 · Assigned by jpcert
CVE-2023-32546
Medium 4.4
In plain English
A medium-severity code injection in Chatwork Desktop Application (Mac) from Chatwork Co., Ltd.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 20% of all known vulnerabilities).
Severity (CVSS 3.1)4.4Medium
Exploit odds (30 days)0.3%top 80.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Code injection vulnerability exists in Chatwork Desktop Application (Mac) 2.6.43 and earlier. If this vulnerability is exploited, a non-administrative user of the Mac where the product is installed may store and obtain audio and image data from the product without the user's consent.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Chatwork Co., Ltd. | Chatwork Desktop Application (Mac) | versions 2.6.43 and earlier |
Weakness: CWE-94 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N