Weave

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Weave records in CISA KEV

No Weave vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Weave Desktop · all components

TI-2024-16792 CVE-2024-25545 · GHSA-898m-ph5q-ggvf

LOW 35

An issue in Weave Weave Desktop v.7.78.10 allows a local attacker to execute arbitrary code via a crafted script to the nwjs framework component.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00188 Published 2024-04-12 No fix listed CWE-358