Published: 03/07/2023 Updated: 07/11/2023

CVSS v3 Base Score: 5.3 | Impact Score: 1.4 | Exploitability Score: 3.9

VMScore: 0

Nullsoft Scriptable Install System (NSIS) prior to 3.09 mishandles access control for an uninstaller directory.

Vulnerable Product	Search on Vulmon	Subscribe to Product
nullsoft nullsoft scriptable install system

Debian Bug report logs - #1040880 nsis: CVE-2023-37378 Package: src:nsis; Maintainer for src:nsis is Thomas Gaugler <thomas@dadienet>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Tue, 11 Jul 2023 20:57:02 UTC Severity: important Tags: security, upstream Found in versions nsis/308-3, nsis/3061-1 ...

NVD-CWE-noinfo https://github.com/kichik/nsis/commit/281e2851fe669d10e0650fc89d0e7fb74a598967 https://sourceforge.net/p/nsis/news/2023/07/nsis-309-released/https://nsis.sourceforge.io/Docs/AppendixF.html#v3.09 https://github.com/kichik/nsis/commit/409b5841479c44fbf33a6ba97c1146e46f965467 https://github.com/kichik/nsis/commit/c40cf78994e74a1a3a381a850c996b251e3277c0 http://sf.net/p/nsis/bugs/1296 https://lists.debian.org/debian-lts-announce/2023/07/msg00005.html https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OZPAAU57IA3NP6UOUXNBUQBAYK3JB2IM/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A65FBUMHLZ7GBV3VDKUB5EK3A7X2UUWK/https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1040880 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2023-37378

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect