CVE-2023-49314

—

CVSS 3.1

7.8 high

EPSS

4%p91

Published

Nov 28, 2023 (Nov 28, 2023)

Modified

Jun 17, 2026

Description

Asana Desktop 2.1.0 on macOS allows code injection because of specific Electron Fuses. There is inadequate protection against code injection through settings such as RunAsNode and EnableNodeCliInspectArguments, and thus r3ggi/electroniz3r can be used to perform an attack.

Vendors: asana
Products: desktop
Weakness: CWE-94
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (4.3%)

In the news0 stories

No ingested article mentions this CVE yet.