Security Advisory

CVE-2023-49314

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-11-28 00:00:00

Last updated 2024-11-26 20:33:38

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Asana Desktop 2.1.0 on macOS allows code injection because of specific Electron Fuses. There is inadequate protection against code injection through settings such as RunAsNode and EnableNodeCliInspectArguments, and thus r3ggi/electroniz3r can be used to perform an attack.

← Browse all CVEs View on cve.org ↗