CVE-2022-27438

https://notcve.org/view.php?id=CVE-2022-27438

06 Jun 2022 — Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer (Advanced Updater) are affected by a remote code execution vulnerability via the CustomDetection parameter in the update check function. To exploit this vulnerability, a user must start an affected installation to trigger the update check. Caphyon Ltd Advanced Installer 19.3 y anteriores y muchos productos que utilizan el actualizador de Advanced Installer (Advanced Updater) están afectados por una... • https://github.com/gerr-re/cve-2022-27438 • CWE-494: Download of Code Without Integrity Check •