Skip to content

giovannipajeu1/CVE-2024-23743

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

3 Commits
 
 

Repository files navigation

CVE-2024-23743

CVE-2024-23743

An issue in Notion for MacOS v.3.1.0 allows a remote, attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments components

There is a tool designed to automate the process of searching for vulnerabilities in electron: https://github.com/r3ggi/electroniz3r

image

With this tool, we can check if the App is Vulnerable:

image

After validation, we can inject our code, and get a shell

image

And Now, Enjoy your Shell:

image

About

No description, website, or topics provided.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published