CVE-2023-44402

creationtimestamp| type| source ---|---|--- 2023-12-22 08:51:39+00:00| seen| https://t.me/ctinow/158250...

CVE-2023-44402 ASAR Integrity bypass via filetype confusion in electron

Electron is an open source framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. This only impacts apps that have the embeddedAsarIntegrityValidation and onlyLoadAppFromAsar fuses enabled. Apps without these fuses enabled are not impacted. This issue is specifi...

CVE-2023-44402

CVE-2023-44402 concerns Electron where ASAR integrity checks can be bypassed when embeddedAsarIntegrityValidation and onlyLoadAppFromAsar fuses are enabled on macOS. The issue requires an attacker with write access to the app’s filesystem (e.g., the .app bundle) to exploit, potentially allowing l...

@ai-lighthouse/cli (>=1.0.1, <=1.0.3), @ccnoname/kk-log (>=1.0.0, <=1.0.2) +60 more potentially affected by CVE-2023-44402 via electron (>=23.0.0, <=23.3.13)

electron NPM version =23.0.0, =1.0.1, =1.0.0, =1.0.15, =0.49.0, =0.0.1, =0.0.5, =0.30.0, =1.0.0-beta.1, =2.4.1, =0.0.2, =0.0.0-next-1d0257ec5ae772888fbfb677bbacf8cd7dfb3127, =0.0.0-next-1d0257ec5ae772888fbfb677bbacf8cd7dfb3127, =8.12.0 - @mongodb-js/compass-settings 0.14.0 and more Source cves:...

niconizer (>=2.0.106, <=2.0.108) potentially affected by CVE-2023-44402 via electron (>=26.0.0, <=26.2.0)

electron NPM version =26.0.0, =2.0.106, =2.0.108 Source cves: CVE-2023-44402 Source advisory: OSV:GHSA-7M48-WC93-9G85...

@finsemble/finsemble-core (>=8.8.0-beta.1, <=8.9.9), @finsemble/finsemble-electron-adapter (>=8.8.0-beta.1, <=8.9.9) +6 more potentially affected by CVE-2023-44402 via electron (>=24.0.0, <=24.4.1)

electron NPM version =24.0.0, =8.8.0-beta.1, =8.8.0-beta.1, =4.1.5, =2.0.99, =0.0.31, =0.0.33 - reduxtron 0.0.1-alpha Source cves: CVE-2023-44402 Source advisory: OSV:GHSA-7M48-WC93-9G85...

@dweb-browser/desktop (0.1.2), @dweb-browser/js-process (0.1.2) +27 more potentially affected by CVE-2023-44402 via electron (>=25.0.0-beta.1, <=25.8.0)

electron NPM version =25.0.0-beta.1, =1.0.0, =1.0.0, =0.6.0, =0.0.22, =0.0.93, =0.0.95 - firedev 16.444.5 - firedev-class-helpers 16.444.4 - firedev-config 16.444.4 - firedev-core 16.444.5 - firedev-logger 16.444.4 - firedev-rest 16.444.3 - firedev-storage 16.444.4 and more Source cves:...

@deploysentinel/playwright-watch (>=0.1.0, <=0.2.2), @finsemble/finsemble-core (>=1.0.0-beta-9, <=8.7.0) +9 more potentially affected by CVE-2023-44402 via electron (>=22.0.0, <=22.3.13)

electron NPM version =22.0.0, =0.1.0, =1.0.0-beta-9, =1.0.0-beta-9, =9.13.1, =60.0.0-pre1, =0.0.1-alpha.2022-12-11.1670718306317, =1.3.0, =0.0.87, =2.0.92, =2.0.98 Source cves: CVE-2023-44402 Source advisory: OSV:GHSA-7M48-WC93-9G85...