High severity7.8NVD Advisory· Published Nov 28, 2023· Updated Jun 17, 2026

CVE-2023-49314

Description

Asana Desktop 2.1.0 on macOS allows code injection because of specific Electron Fuses. There is inadequate protection against code injection through settings such as RunAsNode and EnableNodeCliInspectArguments, and thus r3ggi/electroniz3r can be used to perform an attack.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Asana/Asana Desktopdescription
Asana/Asana Desktopllm-fuzzy
Range: =2.1.0

Patches

Vulnerability mechanics

References

asana.com/pt/downloadnvdProduct
www.electronjs.org/docs/latest/tutorial/fusesnvdTechnical Description
www.electronjs.org/blog/statement-run-as-node-cvesnvd

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000