Описание
nadesiko3 vulnerable to OS Command Injection
OS command injection vulnerability in Nako3edit, editor component of nadesiko3 (PC Version) v3.3.74 and earlier allows a remote attacker to obtain appkey of the product and execute an arbitrary OS command on the product.
Пакеты
Наименование
nadesiko3
npm
Затронутые версииВерсия исправления
< 3.3.75
3.3.75
Связанные уязвимости
CVSS3: 9.8
nvd
около 3 лет назад
OS command injection vulnerability in Nako3edit, editor component of nadesiko3 (PC Version) v3.3.74 and earlier allows a remote attacker to obtain appkey of the product and execute an arbitrary OS command on the product.