CVE-2023-49314 (published 2023-11-28T00:00:00)
Asana Desktop 2.1.0 on macOS allows code injection because of specific Electron Fuses. There is inadequate protection against code injection through settings such as RunAsNode and EnableNodeCliInspectArguments, and thus r3ggi/electroniz3r can be used to perform an attack.
Affected products: Vendor: n/a
Product: n/a
Versions: n/a