Lucene search
MitreCVELIST:CVE-2018-1000118HistoryOct 03, 2022 - 4:21 p.m.
CVE-2018-1000118
2022-10-0316:21:59
mitre
www.cve.org
github
electron
command injection
protocol handler
vulnerability
exploitable
browser
fix
cve-2018-1000006
case insensitive
Github Electron version Electron 1.8.2-beta.4 and earlier contains a Command Injection vulnerability in Protocol Handler that can result in command execute. This attack appear to be exploitable via the victim opening an electron protocol handler in their browser. This vulnerability appears to have been fixed in Electron 1.8.2-beta.5. This issue is due to an incomplete fix for CVE-2018-1000006, specifically the black list used was not case insensitive allowing an attacker to potentially bypass it.
Related
cve
cve
CVE-2018-1000118
2022-10-03 16:21:59
CVE-2018-1000006
2018-01-24 23:29:00
osv
osv
CVE-2018-1000118
2018-03-07 14:29:00
Electron protocol handler browser vulnerable to Command Injection
2018-03-26 16:41:20
Remote Code Execution in electron
2018-01-23 03:57:44
prion
prion
Command injection
2018-03-07 14:29:00
Design/Logic Flaw
2018-01-24 23:29:00
nvd
nvd
CVE-2018-1000118
2018-03-07 14:29:00
CVE-2018-1000006
2018-01-24 23:29:00
github
github
Electron protocol handler browser vulnerable to Command Injection
2018-03-26 16:41:20
Remote Code Execution in electron
2018-01-23 03:57:44
veracode
veracode
Remote Code Execution (RCE)
2018-03-08 09:54:05
Remote Code Execution (RCE)
2018-01-26 02:02:14
threatpost
threatpost
cvelist
cvelist
CVE-2018-1000006
2018-01-24 23:00:00
thn
thn
Critical Flaw Hits Popular Windows Apps Built With Electron JS Framework
2018-01-24 01:26:00
zdi
zdi
nodejs
nodejs
Remote Code Execution
2018-01-23 18:40:39
packetstorm
packetstorm
Exodus Wallet (ElectronJS Framework) Remote Code Execution
2018-01-26 00:00:00
Exodus Wallet (ElectronJS Framework) Remote Code Execution
2018-03-29 00:00:00
checkpoint_advisories
checkpoint_advisories
Electron Protocol Handler Remote Code Execution (CVE-2018-1000006)
2018-01-25 00:00:00