CVE-2024-23738

Summary

CVE-2024-23738 is a vulnerability affecting Postman versions 10.22 and below on macOS. According to reports, an attacker can exploit the RunAsNode and enableNodeClilnspectArguments settings to execute arbitrary code remotely. However, the vendor, Postman, has disputed the report's accuracy, stating that the configuration does not allow for remote code execution. Regardless, it is recommended that users update to the latest version of Postman to mitigate potential risks. This vulnerability could lead to serious consequences if exploited, including unauthorized access, data theft, or system compromise.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.