CVE-2022-26877

Asana Desktop before 1.6.0 allows remote attackers to exfiltrate local files if they can trick the Asana desktop app into loading a malicious web page

published April 9, 2022

CVSS
—
EPSS
1%
Percentile
66.4
In the wild
Unconfirmed
What it is

Asana Desktop before 1.6.0 allows remote attackers to exfiltrate local files if they can trick the Asana desktop app into loading a malicious web page.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01142 · 66.4th percentile
Published
2022-04-09T00:17Z
EPSS history
Timeline
  • 09 APR 00:17Z
    Asana Desktop before 1.6.0 allows remote attackers to exfiltrate local files if they can trick the Asana desktop app into loading a malicious web page
    cvelistv5