CVE-2023-49314

2023-11-2800:00:00

mitre

www.cve.org

asana

desktop

macos

code injection

vulnerability

cve-2023-49314

electron fuses

inadequate protection

attack

EPSS

Percentile

5.1%

JSON

Asana Desktop 2.1.0 on macOS allows code injection because of specific Electron Fuses. There is inadequate protection against code injection through settings such as RunAsNode and EnableNodeCliInspectArguments, and thus r3ggi/electroniz3r can be used to perform an attack.