CVE-2024-23743

Notion through 3.1.0 on macOS might allow code execution because of RunAsNode and enableNodeClilnspectArguments. NOTE: the vendor states "the attacker must launch the Notion Desktop application with nonstandard flags that turn the Electron-based application into a Node.js execution environment."
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:notion:notion:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*

History

25 Sep 2024, 19:35

Type Values Removed Values Added
CWE CWE-250

03 Mar 2024, 00:15

Type Values Removed Values Added
Summary (en) An issue in Notion for macOS version 3.1.0 and before, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments components. (en) Notion through 3.1.0 on macOS might allow code execution because of RunAsNode and enableNodeClilnspectArguments. NOTE: the vendor states "the attacker must launch the Notion Desktop application with nonstandard flags that turn the Electron-based application into a Node.js execution environment."
References
  • () https://github.com/r3ggi/electroniz3r -

16 Feb 2024, 16:15

Type Values Removed Values Added
References
  • () https://www.electronjs.org/blog/statement-run-as-node-cves -

13 Feb 2024, 19:18

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 9.8
v2 : unknown
v3 : 3.3

01 Feb 2024, 21:12

Type Values Removed Values Added
References () https://github.com/V3x0r/CVE-2024-23743 - () https://github.com/V3x0r/CVE-2024-23743 - Exploit
CPE cpe:2.3:a:notion:notion:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 9.8
First Time Notion
Apple
Notion notion
Apple macos
CWE NVD-CWE-noinfo

28 Jan 2024, 02:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-01-28 02:15

Updated : 2024-09-25 19:35


NVD link : CVE-2024-23743

Mitre link : CVE-2024-23743

CVE.ORG link : CVE-2024-23743


JSON object : View

Products Affected

notion

  • notion

apple

  • macos
CWE
NVD-CWE-noinfo CWE-250

Execution with Unnecessary Privileges