7.1Hoch
CVE-2025-4613Client side RCE in Google Web Designer App
Beschreibung
Path traversal in Google Web Designer's template handling versions prior to 16.3.0.0407 on Windows allows attacker to achieve remote code execution by tricking users into downloading a malicious ad template
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| web designer | < 16.3.0.0407 | ||
| Web Designer App | < 16.3.0.0407 |
Referenzen und Patches
- https://balintmagyar.com/articles/google-web-designer-path-traversal-client-side-rce-cve-2025-4613 ExploitThird Party Advisory
CPE-Treffer (NVD) (1)
cpe:2.3:a:google:web_designer:*:*:*:*:*:*:*:*< 16.3.0.0407