CVE-2024-25545

Weave Weave Desktop v7.78.10 is affected by CVE-2024-25545 due to a flaw in the nwjs framework component that allows a local attacker to execute arbitrary code via a crafted script. The exploit is local with no user interaction required. Root cause: crafted script to the nwjs component; Impact: a...