CVE-2022-26877

—

CVSS 3.1

6.5 medium

EPSS

1%p65

Published

Apr 9, 2022 (Apr 9, 2022)

Modified

Jun 17, 2026

Description

Asana Desktop before 1.6.0 allows remote attackers to exfiltrate local files if they can trick the Asana desktop app into loading a malicious web page.

Vendors: asana
Products: desktop
Weakness: CWE-552
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news0 stories

No ingested article mentions this CVE yet.