ASAR Integrity bypass via filetype confusion in electron

🗓️ 01 Dec 2023 21:06:32Reported by GoogleType

osv🔗 osv.dev👁 12 Views

ASAR Integrity bypass via electron filetype confusion on macO

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 8
OSV	CVE-2023-44402	1 Dec 202322:15	–	osv
Prion	Cross site scripting	1 Dec 202322:15	–	prion
Hacker One	Internet Bug Bounty: ASAR Integrity bypass via filetype confusion	4 Dec 202306:02	–	hackerone
Veracode	Insufficient Verification Of Data Authenticity	4 Dec 202309:15	–	veracode
NVD	CVE-2023-44402	1 Dec 202322:15	–	nvd
CVE	CVE-2023-44402	1 Dec 202322:15	–	cve
Cvelist	CVE-2023-44402 ASAR Integrity bypass via filetype confusion in electron	1 Dec 202321:45	–	cvelist
Github Security Blog	ASAR Integrity bypass via filetype confusion in electron	1 Dec 202321:32	–	github

Source	Link
github	www.github.com/electron/electron/security/advisories/GHSA-7m48-wc93-9g85
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-44402
github	www.github.com/electron/electron/pull/39788
github	www.github.com/electron/electron
electronjs	www.electronjs.org/docs/latest/tutorial/fuses

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

01 Dec 2023 21:32Current

6.7Medium risk

Vulners AI Score6.7

CVSS37

EPSS0.00115