Code injection

2024-01-0901:15:00

PRIOn knowledge base

www.prio-n.com

evernote

macos

remote attacker

arbitrary code

runasnode

enablenodeclilnspectarguments

nvd

8.2 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.9%

JSON

An issue in Evernote Evernote for MacOS v.10.68.2 allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments components.

CPENameOperatorVersion
evernoteeq10.68.2

CPE	Name	Operator	Version
	evernote	eq	10.68.2

References

evernote.com

github.com/V3x0r/CVE-2023-50643

www.electronjs.org/blog/statement-run-as-node-cves