Description
OS command injection vulnerability in Nadesiko3 (PC Version) v3.3.61 and earlier allows a remote attacker to execute an arbitrary OS command when processing compression and decompression on the product.
Remediation
References
https://github.com/kujirahand/nadesiko3/issues/1325
https://github.com/kujirahand/nadesiko3/issues/1347
https://jvn.jp/en/jp/JVN56968681/index.html
Related Vulnerabilities
CVE-2022-4640 Vulnerability in maven package net.mingsoft:ms-mcms
CVE-2022-24901 Vulnerability in npm package parse-server
CVE-2023-29210 Vulnerability in maven package org.xwiki.platform:xwiki-platform-notifications-ui
CVE-2021-33829 Vulnerability in npm package ckeditor4
CVE-2022-31051 Vulnerability in npm package semantic-release