Asana

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Asana records in CISA KEV

No Asana vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Desktop 2 records HIGH

Records

2 records in Desktop · all components

TI-2023-26938 CVE-2023-49314 · GHSA-3ghj-wv9w-7vp9

Asana Desktop 2.1.0 on macOS allows code injection because of specific Electron Fuses.

HIGH 69

Asana Desktop 2.1.0 on macOS allows code injection because of specific Electron Fuses.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.04333 Published 2023-11-28 No fix listed CWE-94

TI-2022-10119 CVE-2022-26877 · GHSA-vgf6-w8f2-8x87

Asana Desktop before 1.6.0 allows remote attackers to exfiltrate local files if they can…

LOW 31

Asana Desktop before 1.6.0 allows remote attackers to exfiltrate local files if they can trick the Asana desktop app into loading a malicious web page.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01142 Published 2022-04-09 No fix listed CWE-552

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0