2024 Miro — CVE-2024-23746 vulnerability, potential private board access

2024 Unknown records affected

Data compromised

Potential: private board access

Technical writeup

Researchers identified a flaw that could have allowed attackers to access private boards. CVE-2024-23746 (CVSS 9.8) affected Miro Desktop on macOS—code injection via improper control. No evidence of large-scale exfiltration.

Root cause

Code injection vulnerability; improper URL/code validation

References

https://nvd.nist.gov/vuln/detail/CVE-2024-23746