CVE-2024-23755

ALTO 8.8CVE-2024-23755 · Published 23/03/2024 · updated 17/06/2026

In breve

CVE-2024-23755 è una vulnerabilità ALTO (CVSS 8.8) che riguarda clickup (clickup).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.1%, superiore al 64.5% delle vulnerabilità.
Correzione: aggiornare a 3.3.77 o successiva.

Package	Affected versions	Patched versions
clickup clickup	`< 3.3.77`	`3.3.77`

Description

ClickUp Desktop before 3.3.77 on macOS and Windows allows code injection because of specific Electron Fuses. There is inadequate protection against code injection through settings such as RunAsNode.

References

clickup.com/security/disclosures · Vendor Advisory
clickup.com/terms/security-policy · Not Applicable
electronjs.org/blog/statement-run-as-node-cves · Not Applicable
electronjs.org/docs/latest/tutorial/fuses · Not Applicable

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free