CVE-2024-23743

Name of the Vulnerable Software and Affected Versions Notion versions prior to 3.1.0

Description The issue might allow code execution because of RunAsNode and enableNodeClilnspectArguments. The vendor states that the attacker must launch the Notion Desktop application with nonstandard flags that turn the Electron-based application into a Node.js execution environment.

Recommendations For Notion versions prior to 3.1.0, consider disabling the RunAsNode and enableNodeClilnspectArguments components as a temporary workaround until a patch is available. Restrict access to the Notion Desktop application to minimize the risk of exploitation.