CVE-2023-32546: 
NixOS vulnerability analysis and mitigation

Code injection vulnerability (CVE-2023-32546) was discovered in Chatwork Desktop Application (Mac) version 2.6.43 and earlier. The vulnerability was disclosed on June 13, 2023, affecting the macOS version of the Chatwork Desktop Application (JVN Advisory).

The vulnerability is classified as a code injection vulnerability (CWE-94) with a CVSS v3.1 base score of 4.4 (Medium), and vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N. The vulnerability requires local access and low privileges to exploit, with no user interaction needed (NVD).

If exploited, this vulnerability allows a non-administrative user of the Mac where the product is installed to store and obtain audio and image data from the product without the user's consent (JVN Advisory).

The vulnerability requires local access to the system with low privileges. The attack complexity is considered low, indicating that the vulnerability is relatively straightforward to exploit once local access is obtained (NVD).

Users are advised to update the Chatwork Desktop Application to the latest version as recommended by the developer. Chatwork Co., Ltd. has acknowledged the vulnerability and provided updates to address this security issue (JVN Advisory).