giovannipajeu1/CVE-2024-23738

giovannipajeu1/CVE-2024-23738

GitHubGitHub
GitHubgithub.com
Releases0
Stars1
CVE-2024-23738
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2024-23738↗
9.8 CRITICAL—

An issue in Postman version 10.22 and before on macOS allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings. NOTE: the vendor states "we dispute the report's accuracy ... the configuration does not enable remote code execution.."