CVE-2022-41642

Published December 5th, 2022

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

N/A

Affected

PROJECT

Description

OS command injection vulnerability in Nadesiko3 (PC Version) v3.3.61 and earlier allows a remote attacker to execute an arbitrary OS command when processing compression and decompression on the product.

kujirahand/nadesiko3

Japanese Programming Language Nadesiko v3 (JavaScript/TypeScript)

GitHub

303