CVEvulnerability
CVE-2024-23755
8.8 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2024-03-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-94
Description
ClickUp Desktop before 3.3.77 on macOS and Windows allows code injection because of specific Electron Fuses. There is inadequate protection against code injection through settings such as RunAsNode.
Affected configurations
• clickup clickup (< 3.3.77)
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- https://clickup.com/security/disclosures Vendor Advisory
- https://clickup.com/terms/security-policy Not Applicable
- https://www.electronjs.org/blog/statement-run-as-node-cves Not Applicable
- https://www.electronjs.org/docs/latest/tutorial/fuses Not Applicable
- https://clickup.com/security/disclosures Vendor Advisory
- https://clickup.com/terms/security-policy Not Applicable
- https://www.electronjs.org/blog/statement-run-as-node-cves Not Applicable
- https://www.electronjs.org/docs/latest/tutorial/fuses Not Applicable