CVE-2023-32546

State: Published
Severity: 4.4 Medium
Published: Jun 13, 2023
Updated: Jan 3, 2025
Reserved: May 11, 2023

Description

Code injection vulnerability exists in Chatwork Desktop Application (Mac) 2.6.43 and earlier. If this vulnerability is exploited, a non-administrative user of the Mac where the product is installed may store and obtain audio and image data from the product without the user's consent.

Scores

CVSS	Score	Vector	Source
3.1	4.4 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N	CISA-ADP

Weaknesses

CWE-94 Improper Control of Generation of Code ('Code Injection')

Affected Products

Product	Versions
Chatwork Desktop Application (Mac)Chatwork Co., Ltd.	versions 2.6.43 and earlierAffected

References

https://go.chatwork.com/ja/download/
https://jvn.jp/en/jp/JVN96828492/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.