CVE-2022-29247 Exposure of Resource to Wrong Sphere in Electron

🗓️ 13 Jun 2022 21:05:10Reported by GitHub_MType

CVE-2022-29247 Electron vulnerability fi

Reporter	Title	Published	Views	Family All 15
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to a remote attacker due to the electron module (CVE-2022-29247, CVE-2022-36077)	12 Dec 202209:16	–	ibm
BDU FSTEC	The vulnerability of the `nodeIntegrationInSubFrames` parameter in the software platform for creating Electron applications allows a hacker to disclose protected information.	19 Aug 202200:00	–	bdu_fstec
Circl	CVE-2022-29247	14 Jun 202200:17	–	circl
CNNVD	Electron 安全漏洞	13 Jun 202200:00	–	cnnvd
CVE	CVE-2022-29247	13 Jun 202221:05	–	cve
EUVD	EUVD-2022-6098	3 Oct 202520:07	–	euvd
Github Security Blog	Compromised child renderer processes could obtain IPC access without nodeIntegrationInSubFrames being enabled	16 Jun 202223:14	–	github
NVD	CVE-2022-29247	13 Jun 202221:15	–	nvd
OSV	CVE-2022-29247 Exposure of Resource to Wrong Sphere in Electron	13 Jun 202221:05	–	osv
OSV	GHSA-MQ8J-3H7H-P8G7 Compromised child renderer processes could obtain IPC access without nodeIntegrationInSubFrames being enabled	16 Jun 202223:14	–	osv

[
  {
    "product": "electron",
    "vendor": "electron",
    "versions": [
      {
        "status": "affected",
        "version": "< 15.5.5"
      },
      {
        "status": "affected",
        "version": ">= 16.0.0-beta.1, < 16.2.6"
      },
      {
        "status": "affected",
        "version": ">= 17.0.0-beta.1, < 17.2.0"
      },
      {
        "status": "affected",
        "version": ">= 18.0.0-beta.1, <= 18.0.0-beta.5"
      }
    ]
  }
]

Source	Link
github	www.github.com/electron/electron/security/advisories/GHSA-mq8j-3h7h-p8g7

13 Jun 2022 21:05Current

9.6High risk

Vulners AI Score9.6

CVSS 3.12.2

EPSS0.00803

CWE-668