← Database

CVE-2022-26877

MEDIUM CVSS: 6.5 Published: 2022-04-09 Modified: 2026-06-17

Description

Asana Desktop before 1.6.0 allows remote attackers to exfiltrate local files if they can trick the Asana desktop app into loading a malicious web page.

Affected Platforms

Asana Desktop

Weakness Type

CWE-552

References