Lucene search
GoogleOSV:CVE-2020-4077HistoryJul 07, 2020 - 12:15 a.m.
CVE-2020-4077
2020-07-0700:15:10
Google
osv.dev
4
In Electron before versions 7.2.4, 8.2.4, and 9.0.0-beta21, there is a context isolation bypass. Code running in the main world context in the renderer can reach into the isolated Electron context and perform privileged actions. Apps using both contextIsolation and contextBridge are affected. This is fixed in versions 9.0.0-beta.21, 8.2.4 and 7.2.4.
Related
veracode
veracode
Authorization Bypass
2020-07-08 03:06:33
github
github
Context isolation bypass via contextBridge in Electron
2020-07-07 00:01:10
prion
prion
Design/Logic Flaw
2020-07-07 00:15:00
cve
cve
CVE-2020-4077
2020-07-07 00:15:10
cvelist
cvelist
CVE-2020-4077 Context isolation bypass via contextBridge in Electron
2020-07-07 00:05:16
osv
osv
Context isolation bypass via contextBridge in Electron
2020-07-07 00:01:10
nvd
nvd
CVE-2020-4077
2020-07-07 00:15:10