electron/fuses

electron/fuses

Releases16
Frequency3 months 3 weeks
Last Release
Stars54

CVE History

CVEPublishedCVSS v3CVSS v2
7.8 HIGH

Asana Desktop 2.1.0 on macOS allows code injection because of specific Electron Fuses. There is inadequate protection against code injection through settings such as RunAsNode and EnableNodeCliInspectArguments, and thus r3ggi/electroniz3r can be used to perform an attack.