CVE-2023-37378

Katalog CVE

CVSS 5.3 · Medium EPSS 0,88%

Kerentanan pada nullsoft scriptable install system. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

Nullsoft Scriptable Install System (NSIS) before 3.09 mishandles access control for an uninstaller directory.

Rincian

Terbit di NVD

3 Juli 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator

EPSS (30 hari)

0,88% peluang dieksploitasi; lebih tinggi dari 58,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/kichik/nsis/commit/281e2851fe669d10e0650fc89d0e7fb74a598967 patch
• https://github.com/kichik/nsis/commit/409b5841479c44fbf33a6ba97c1146e46f965467 patch
• https://github.com/kichik/nsis/commit/c40cf78994e74a1a3a381a850c996b251e3277c0 patch
• https://lists.debian.org/debian-lts-announce/2023/07/msg00005.html mailing list · advisory pihak ketiga
• http://sf.net/p/nsis/bugs/1296 issue tracking · permissions required
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A65FBUMHLZ7GB...
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OZPAAU57IA3NP...
• https://nsis.sourceforge.io/Docs/AppendixF.html#v3.09 release notes
• https://sourceforge.net/p/nsis/news/2023/07/nsis-309-released/ release notes
• https://lists.debian.org/debian-lts-announce/2024/09/msg00013.html