OS command injection vulnerability in Nako3edit, editor component of nadesiko3 (PC Version) v3.3.74 and earlier allows a remote attacker to obtain appkey of the product and execute an arbitrary OS command on the product.
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.02147·Published 2022-12-05·Fixed in 3.3.75CWE-78
OS command injection vulnerability in Nadesiko3 (PC Version) v3.3.61 and earlier allows a remote attacker to execute an arbitrary OS command when processing compression and decompression on the product.
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.02147·Published 2022-12-05·Fixed in 3.3.69CWE-78
Improper check or handling of exceptional conditions vulnerability in Nako3edit, editor component of nadesiko3 (PC Version) v3.3.74 and earlier allows a remote attacker to inject an invalid value to decodeURIComponent of…
CVSS 3.1HIGH 7.5·Network·No auth·No interaction·EPSS 0.01604·Published 2022-12-05·Fixed in 3.3.75CWE-703