← CVE Intelligence

CVE-2024-3775

aEnrich Technology a+HRD - Argument Injection PUBLISHED

Description (CNA)

aEnrich Technology a+HRD's functionality for downloading files using youtube-dl.exe does not properly restrict user input. This allows attackers to pass arbitrary arguments to youtube-dl.exe, leading to the download of partial unauthorized files.

Affected (CNA)

Vendor / productVersions
aEnrich Technology / a+HRDaffected 6.8; affected 7.0; affected 7.1; affected 7.2

CWE

CWE-88

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.