What’s Vulnerable › Vulnerabilities

CVE-2024-23743

• Severity: low (CVSS 3.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-01-28 · updated 2026-06-17
• Weakness: CWE-250

Description

Notion through 3.1.0 on macOS might allow code execution because of RunAsNode and enableNodeClilnspectArguments. NOTE: the vendor states "the attacker must launch the Notion Desktop application with nonstandard flags that turn the Electron-based application into a Node.js execution environment."

Affected products

• Notion: through 3.1.0

References

• https://github.com/V3x0r/CVE-2024-23743
• https://github.com/r3ggi/electroniz3r
• https://www.electronjs.org/blog/statement-run-as-node-cves
• https://github.com/V3x0r/CVE-2024-23743
• https://github.com/r3ggi/electroniz3r
• https://www.electronjs.org/blog/statement-run-as-node-cves

Get alerted when CVE-2024-23743 or the next vulnerability affects your stack