Chromium Remote Code Execution in electron

GHSA-4w88-rjj3-x7wp · CVE-2017-16151

Published Jul 24, 2018 · Modified Nov 8, 2023

AI SAST

Find this class of vulnerability in your own code

Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.

Explore AI SAST Explore dependency scanning →

Description

Affected versions of ElectronJS are susceptible to a remote code execution vulnerability that occurs when an affected application access remote content, even if the sandbox option is enabled.

Recommendation

Update to electron version 1.7.8 or later.

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2017-16151
WEB https://electron.atom.io/blog/2017/09/27/chromium-rce-vulnerability-fix
WEB https://electronjs.org/blog/chromium-rce-vulnerability
ADVISORY https://github.com/advisories/GHSA-4w88-rjj3-x7wp
WEB https://www.npmjs.com/advisories/539

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes