CVE-2023-50643 - An issue in Evernote Evernote for MacOS v.10.68.2 allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments components

Back Back to CVE browser

CRITICAL

An issue in Evernote Evernote for MacOS v.10.68.2 allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments components

Published Jan 9, 2024

9.8

CRITICAL

CVSS 3.1

EPSS 1.70%

Description

An issue in Evernote Evernote for MacOS v.10.68.2 allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments components.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-55421
Advisory
https://github.com/V3x0r/CVE-2023-50643
ExploitThird Party Advisory
https://www.electronjs.org/blog/statement-run-as-node-cves

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-55421		Advisory
https://github.com/V3x0r/CVE-2023-50643		ExploitThird Party Advisory
https://www.electronjs.org/blog/statement-run-as-node-cves