CVE-2024-23755

ClickUp Desktop before 3.3.77 on macOS and Windows allows code injection because of specific Electron Fuses

High · published March 23, 2024

CVSS v3.1
8.8
EPSS
1%
Percentile
64.0
In the wild
Unconfirmed
What it is

ClickUp Desktop before 3.3.77 on macOS and Windows allows code injection because of specific Electron Fuses. There is inadequate protection against code injection through settings such as RunAsNode.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01051 · 64.0th percentile
Published
2024-03-23T00:00Z
EPSS history
Timeline
  • 23 MAR 00:00Z
    ClickUp Desktop before 3.3.77 on macOS and Windows allows code injection because of specific Electron Fuses
    cvelistv5