6 matches found
CVE-2022-41642
OS command injection vulnerability in Nadesiko3 PC Version v3.3.61 and earlier allows a remote attacker to execute an arbitrary OS command when processing compression and decompression on the product...
nadesiko3php (0.0.10) potentially affected by CVE-2022-41642 via nadesiko3 (3.2.52)
nadesiko3 NPM version 3.2.52 is affected by a known vulnerability. The following packages have a transitive dependency on nadesiko3 and may be impacted: - nadesiko3php 0.0.10 Source cves: CVE-2022-41642 Source advisory: OSV:GHSA-M8R5-7WF4-63MW...
CVE-2022-41642
OS command injection vulnerability in Nadesiko3 PC Version v3.3.61 and earlier allows a remote attacker to execute an arbitrary OS command when processing compression and decompression on the product...
CVE-2022-41642
CVE-2022-41642 affects Nadesiko3 (PC Version). v3.3.61 and earlier are vulnerable to an OS command injection during compression/decompression. The issue also covers 3.3.62–3.3.68; patch to 3.3.69 or later to fix. Sources indicate the most recent patch is 3.3.69; no exploitation status is provided...
CVE-2022-41642
OS command injection vulnerability in Nadesiko3 PC Version v3.3.61 and earlier allows a remote attacker to execute an arbitrary OS command when processing compression and decompression on the product...
JVN#56968681: Multiple vulnerabilities in nadesiko3
Nadesiko3 provided by kujirahand contains multiple vulnerabilities listed below. OS command injection vulnerability in processing compression and decompression CWE-78 - CVE-2022-41642 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H| Base Score: 9.8 CVSS v2...