CVE-2022-29247

🗓️ 13 Jun 2022 21:15:07Reported by [email protected]Type

Vulnerability in Electron allows renderer with JS execution to access ipcRenderer

Reporter	Title	Published	Views	Family All 15
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to a remote attacker due to the electron module (CVE-2022-29247, CVE-2022-36077)	12 Dec 202209:16	–	ibm
BDU FSTEC	The vulnerability of the `nodeIntegrationInSubFrames` parameter in the software platform for creating Electron applications allows a hacker to disclose protected information.	19 Aug 202200:00	–	bdu_fstec
Circl	CVE-2022-29247	14 Jun 202200:17	–	circl
CNNVD	Electron 安全漏洞	13 Jun 202200:00	–	cnnvd
CVE	CVE-2022-29247	13 Jun 202221:05	–	cve
Cvelist	CVE-2022-29247 Exposure of Resource to Wrong Sphere in Electron	13 Jun 202221:05	–	cvelist
EUVD	EUVD-2022-6098	3 Oct 202520:07	–	euvd
Github Security Blog	Compromised child renderer processes could obtain IPC access without nodeIntegrationInSubFrames being enabled	16 Jun 202223:14	–	github
OSV	CVE-2022-29247 Exposure of Resource to Wrong Sphere in Electron	13 Jun 202221:05	–	osv
OSV	GHSA-MQ8J-3H7H-P8G7 Compromised child renderer processes could obtain IPC access without nodeIntegrationInSubFrames being enabled	16 Jun 202223:14	–	osv