CVE-2024-23347

Summary: CVE-2024-23347 affects Meta Spark Studio versions prior to v176. When opening a new project, the application can execute scripts defined in the project’s package.json, enabling arbitrary code execution with the app’s privileges. This is caused by the package.json scripts being run automa...