Command injection

2018-01-0220:29:00

PRIOn knowledge base

www.prio-n.com

4.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.4%

JSON

Github Electron version 1.6.4 - 1.6.11 and 1.7.0 - 1.7.5 is vulnerable to a URL Spoofing problem when opening PDFs in PDFium resulting loading arbitrary PDFs that a hacker can control.

CPENameOperatorVersion
electronge1.6.4
electronle1.6.11
electronge1.7.0
electronle1.7.5

Name	Operator	Version
electron	ge	1.6.4
electron	le	1.6.11
electron	ge	1.7.0
electron	le	1.7.5

References

github.com/electron/electron/pull/10008

github.com/electron/electron/pull/10008/files