CVE-2023-49314

Asana Desktop 2.1.0 on macOS allows code injection because of specific Electron Fuses. There is inadequate protection against code injection through settings such as RunAsNode and EnableNodeCliInspectArguments, and thus r3ggi/electroniz3r can be used to perform an attack...

CVE-2023-49314

CVE-2023-49314 affects multiple entries and is linked to insecure Electron Fuses in macOS applications. Asana Desktop 2.1.0 on macOS is vulnerable due to inadequate protection against code injection via settings like RunAsNode and EnableNodeCliInspectArguments, enabling local attackers to leverag...

CVE-2023-49314

Asana Desktop 2.1.0 on macOS allows code injection because of specific Electron Fuses. There is inadequate protection against code injection through settings such as RunAsNode and EnableNodeCliInspectArguments, and thus r3ggi/electroniz3r can be used to perform an attack...