Lucene search
PRIOn knowledge basePRION:CVE-2018-1000118HistoryMar 07, 2018 - 2:29 p.m.
Command injection
2018-03-0714:29:00
PRIOn knowledge base
www.prio-n.com
3
Github Electron version Electron 1.8.2-beta.4 and earlier contains a Command Injection vulnerability in Protocol Handler that can result in command execute. This attack appear to be exploitable via the victim opening an electron protocol handler in their browser. This vulnerability appears to have been fixed in Electron 1.8.2-beta.5. This issue is due to an incomplete fix for CVE-2018-1000006, specifically the black list used was not case insensitive allowing an attacker to potentially bypass it.
| CPE | Name | Operator | Version |
|---|---|---|---|
| electron | eq | 1.8.2 beta.1 | |
| electron | eq | 1.8.2 beta.2 | |
| electron | eq | 1.8.2 beta.3 | |
| electron | eq | 1.8.2 beta.4 | |
| electron | le | 1.8.1 |
Related
osv
osv
CVE-2018-1000118
2018-03-07 14:29:00
Electron protocol handler browser vulnerable to Command Injection
2018-03-26 16:41:20
Remote Code Execution in electron
2018-01-23 03:57:44
cve
cve
CVE-2018-1000118
2022-10-03 16:21:59
CVE-2018-1000006
2018-01-24 23:29:00
cvelist
cvelist
CVE-2018-1000118
2022-10-03 16:21:59
CVE-2018-1000006
2018-01-24 23:00:00
veracode
veracode
Remote Code Execution (RCE)
2018-03-08 09:54:05
Remote Code Execution (RCE)
2018-01-26 02:02:14
nvd
nvd
CVE-2018-1000118
2018-03-07 14:29:00
CVE-2018-1000006
2018-01-24 23:29:00
github
github
Electron protocol handler browser vulnerable to Command Injection
2018-03-26 16:41:20
Remote Code Execution in electron
2018-01-23 03:57:44
threatpost
threatpost
thn
thn
Critical Flaw Hits Popular Windows Apps Built With Electron JS Framework
2018-01-24 01:26:00
zdi
zdi
nodejs
nodejs
Remote Code Execution
2018-01-23 18:40:39
prion
prion
Design/Logic Flaw
2018-01-24 23:29:00
packetstorm
packetstorm
Exodus Wallet (ElectronJS Framework) Remote Code Execution
2018-01-26 00:00:00
Exodus Wallet (ElectronJS Framework) Remote Code Execution
2018-03-29 00:00:00
checkpoint_advisories
checkpoint_advisories
Electron Protocol Handler Remote Code Execution (CVE-2018-1000006)
2018-01-25 00:00:00