Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer (Advanced Updater) are affected by a remote code execution vulnerability via the CustomDetection parameter in the update check function. To exploit this vulnerability, a user must start an affected installation to trigger the update check.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2022-06-06T22:21:30

Updated: 2024-08-03T05:25:32.729Z

Reserved: 2022-03-21T00:00:00

Link: CVE-2022-27438

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2022-06-06T23:15:07.920

Modified: 2023-04-28T19:03:25.130

Link: CVE-2022-27438

cve-icon Redhat

No data.