CVE-2022-29247

🗓️ 13 Jun 2022 21:05:10Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 501 Views

Electron prior to 18.0.0-beta.6, 17.2.0, 16.2.6, 15.5.5 Vulnerabilit

Reporter	Title	Published	Views	Family All 15
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to a remote attacker due to the electron module (CVE-2022-29247, CVE-2022-36077)	12 Dec 202209:16	–	ibm
BDU FSTEC	The vulnerability of the `nodeIntegrationInSubFrames` parameter in the software platform for creating Electron applications allows a hacker to disclose protected information.	19 Aug 202200:00	–	bdu_fstec
Circl	CVE-2022-29247	14 Jun 202200:17	–	circl
CNNVD	Electron 安全漏洞	13 Jun 202200:00	–	cnnvd
Cvelist	CVE-2022-29247 Exposure of Resource to Wrong Sphere in Electron	13 Jun 202221:05	–	cvelist
EUVD	EUVD-2022-6098	3 Oct 202520:07	–	euvd
Github Security Blog	Compromised child renderer processes could obtain IPC access without nodeIntegrationInSubFrames being enabled	16 Jun 202223:14	–	github
NVD	CVE-2022-29247	13 Jun 202221:15	–	nvd
OSV	CVE-2022-29247 Exposure of Resource to Wrong Sphere in Electron	13 Jun 202221:05	–	osv
OSV	GHSA-MQ8J-3H7H-P8G7 Compromised child renderer processes could obtain IPC access without nodeIntegrationInSubFrames being enabled	16 Jun 202223:14	–	osv

NVD

Vulners

Node

electronjs electronRange<15.5.5

electronjs electronRange16.0.1–16.2.6

electronjs electronRange17.0.1–17.2.0

electronjs electronMatch16.0.0beta1

electronjs electronMatch16.0.0beta2

electronjs electronMatch16.0.0beta3

electronjs electronMatch16.0.0beta4

electronjs electronMatch16.0.0beta5

electronjs electronMatch16.0.0beta6

electronjs electronMatch16.0.0beta7

electronjs electronMatch16.0.0beta8

electronjs electronMatch16.0.0beta9

electronjs electronMatch17.0.0beta1

electronjs electronMatch17.0.0beta2

electronjs electronMatch17.0.0beta3

electronjs electronMatch17.0.0beta4

electronjs electronMatch17.0.0beta5

electronjs electronMatch17.0.0beta6

electronjs electronMatch17.0.0beta7

electronjs electronMatch17.0.0beta8

electronjs electronMatch17.0.0beta9

electronjs electronMatch18.0.0beta1

electronjs electronMatch18.0.0beta2

electronjs electronMatch18.0.0beta3

electronjs electronMatch18.0.0beta4

electronjs electronMatch18.0.0beta5

[
  {
    "product": "electron",
    "vendor": "electron",
    "versions": [
      {
        "status": "affected",
        "version": "< 15.5.5"
      },
      {
        "status": "affected",
        "version": ">= 16.0.0-beta.1, < 16.2.6"
      },
      {
        "status": "affected",
        "version": ">= 17.0.0-beta.1, < 17.2.0"
      },
      {
        "status": "affected",
        "version": ">= 18.0.0-beta.1, <= 18.0.0-beta.5"
      }
    ]
  }
]