CVE-2022-41777

Name of the Vulnerable Software and Affected Versions Nako3edit versions 3.3.74 and earlier

Description The issue is related to an improper check or handling of exceptional conditions in the Nako3edit component, which is part of the Nadeshiko 3 programming language. This allows a remote attacker to inject an invalid value into the decodeURIComponent function of Nako3edit. As a result, the server may crash.

Recommendations For versions 3.3.74 and earlier, consider disabling the decodeURIComponent function in Nako3edit as a temporary workaround until a patch is available. Restrict access to the Nako3edit component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.