CVE-2023-49314

Asana Desktop 2.1.0 on macOS allows code injection because of specific Electron Fuses

published November 28, 2023

CVSS
—
EPSS
4%
Percentile
91.1
In the wild
Unconfirmed
What it is

Asana Desktop 2.1.0 on macOS allows code injection because of specific Electron Fuses. There is inadequate protection against code injection through settings such as RunAsNode and EnableNodeCliInspectArguments, and thus r3ggi/electroniz3r can be used to perform an attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04333 · 91.1th percentile
Published
2023-11-28T00:00Z
EPSS history
Timeline
  • 28 NOV 00:00Z
    Asana Desktop 2.1.0 on macOS allows code injection because of specific Electron Fuses
    cvelistv5