CVE-2024-23743

2024-01-2800:00:00

mitre

www.cve.org

notion

macos

code execution

vulnerability

electron-based application

node.js execution environment

AI Score

4.8

Confidence

High

EPSS

0.001

Percentile

33.2%

JSON

Notion through 3.1.0 on macOS might allow code execution because of RunAsNode and enableNodeClilnspectArguments. NOTE: the vendor states “the attacker must launch the Notion Desktop application with nonstandard flags that turn the Electron-based application into a Node.js execution environment.”