Chromium Remote Code Execution in electron

GHSA-4w88-rjj3-x7wp · CVE-2017-16151

Published Jul 24, 2018 · Modified Nov 8, 2023

Description

Affected versions of ElectronJS are susceptible to a remote code execution vulnerability that occurs when an affected application access remote content, even if the sandbox option is enabled.

Recommendation

Update to electron version 1.7.8 or later.

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2017-16151
WEB https://electron.atom.io/blog/2017/09/27/chromium-rce-vulnerability-fix
WEB https://electronjs.org/blog/chromium-rce-vulnerability
ADVISORY https://github.com/advisories/GHSA-4w88-rjj3-x7wp
WEB https://www.npmjs.com/advisories/539

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes