CVE-2023-49314

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-49314
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-49314.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-49314
Published
2023-11-28T00:00:00Z
Modified
2026-08-12T03:51:41Z
Summary
[none]
Details

Asana Desktop 2.1.0 on macOS allows code injection because of specific Electron Fuses. There is inadequate protection against code injection through settings such as RunAsNode and EnableNodeCliInspectArguments, and thus r3ggi/electroniz3r can be used to perform an attack.

Database specific 
{
    "cna_assigner": "mitre",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/49xxx/CVE-2023-49314.json"
}
References

Affected packages

Git / github.com/electron/fuses

Affected ranges

Type
GIT
Repo
https://github.com/electron/fuses
Events
Introduced
c76019bb492b6a2ebbe9fc1fe07a970486729a27
Last Affected
c76019bb492b6a2ebbe9fc1fe07a970486729a27
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:asana:desktop:2.1.0:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "2.1.0"
        },
        {
            "last_affected": "2.1.0"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

2.*
2.1.0
v2.*
v2.1.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-49314.json"