CVE-2024-23743

Katalog CVE

CVSS 3.3 · Low EPSS 0,37%

Kerentanan Execution with Unnecessary Privileges pada notion. Skor CVSS 3.1 3.3 (Low) menurut NVD.

Deskripsi (NVD)

Notion through 3.1.0 on macOS might allow code execution because of RunAsNode and enableNodeClilnspectArguments. NOTE: the vendor states "the attacker must launch the Notion Desktop application with nonstandard flags that turn the Electron-based application into a Node.js execution environment."

Rincian

Terbit di NVD

28 Januari 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

3.3 (Low), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-250: Execution with Unnecessary Privileges

EPSS (30 hari)

0,37% peluang dieksploitasi; lebih tinggi dari 28,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/V3x0r/CVE-2024-23743 exploit
• https://github.com/r3ggi/electroniz3r
• https://www.electronjs.org/blog/statement-run-as-node-cves