CVE-2022-42496

2022-12-0500:00:00

jpcert

www.cve.org

command injection

nako3edit

remote attacker

appkey

arbitrary command

os command

0.004 Low

EPSS

Percentile

73.4%

JSON

OS command injection vulnerability in Nako3edit, editor component of nadesiko3 (PC Version) v3.3.74 and earlier allows a remote attacker to obtain appkey of the product and execute an arbitrary OS command on the product.

CNA Affected

[
  {
    "vendor": "kujirahand",
    "product": "Nako3edit, editor component of nadesiko3 (PC Version)",
    "versions": [
      {
        "version": "v3.3.74 and earlier",
        "status": "affected"
      }
    ]
  }
]