CVE-2024-50307

Use of potentially dangerous function issue exists in Chatwork Desktop Application (Windows) versions prior to 2.9.2. If a user clicks a specially crafted link in the application, an arbitrary file may be downloaded from an external website and executed. As a result, arbitrary code may be executed on the device that runs Chatwork Desktop Application (Windows).

• CWE-676

• https://jvn.jp/en/jp/JVN78335885/

Published

Oct 28, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-50301In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2024-50302In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-50303In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-50304In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-50305Valid Host header field can cause Apache Traffic Server to c…7.5
• CVE-2024-50306Unchecked return value can allow Apache Traffic Server to re…9.1
• CVE-2024-5031The Memberpress plugin for WordPress is vulnerable to Blind …6.4
• CVE-2024-50310A vulnerability has been identified in SIMATIC CP 1543-1 V4.…8.7
• CVE-2024-50311A denial of service (DoS) vulnerability was found in OpenShi…6.5
• CVE-2024-50312A vulnerability was found in GraphQL due to improper access …5.3
• CVE-2024-50313A vulnerability has been identified in Mendix Runtime V10 (A…6.9
• CVE-2024-50315Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…