Desktop vulnerabilities

1 known vulnerability in Desktop from Asana. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Desktop: Improper Control of Generation of Code

  CVE-2023-49314Nov 28, 2023AsanaEPSS 4.33%

  Asana Desktop 2.1.0 on macOS allows code injection because of specific Electron Fuses. There is inadequate protection against code injection through settings such as RunAsNode and EnableNodeCliInspectArguments, and thus r3ggi/electroniz3r can be used to perfor