CVE Catalog
CVE-2023-37378
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk0.73%
50th percentile - higher than 50% of all known CVEs
Summary
Nullsoft Scriptable Install System (NSIS) before 3.09 mishandles access control for an uninstaller directory.
Risk Assessment
Improper access control may lead to unauthorized access to files in the uninstaller directory, posing a risk to system integrity.
Recommendation
It is recommended to upgrade NSIS to version 3.09 or later to address the access control issue.
Original NVD description (English source)
Nullsoft Scriptable Install System (NSIS) before 3.09 mishandles access control for an uninstaller directory.