@devpodio/application-manager (>=0.3.16, <=0.3.20), @devpodio/bunyan (>=0.3.16, <=0.3.20) +158 more potentially affected by CVE-2018-15685 via electron (>=1.8.1, <=1.8.7)

electron NPM version =1.8.1, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.20 and more Source cves: CVE-2018-15685 Source advisory: OSV:GHSA-HV9C-QWQG-QJ3V...

Electron webPreferences vulnerability can be used to perform remote code execution

GitHub Electron 1.7.15, 1.8.7, 2.0.7, and 3.0.0-beta.6, in certain scenarios involving IFRAME elements and "nativeWindowOpen: true" or "sandbox: true" options, is affected by a webPreferences vulnerability that can be leveraged to perform remote code execution. More information to determine if yo...

@ftnk/electron-prebuilt-compile (1.7.3), @philipptrenz/photo-booth (>=1.0.1, <=1.0.6) +68 more potentially affected by CVE-2018-15685 via electron (>=1.7.0, <=1.7.13)

electron NPM version =1.7.0, =1.0.1, =1.0.0, =1.0.1, =0.4.0-next.64347695, =0.2.0-next.0148a1fd, =0.4.0-next.64347695, =0.2.0-next.0148a1fd, =0.2.0-next.0148a1fd, =0.2.0-next.29255833, =0.2.0-next.29255833, =0.2.0-next.0148a1fd, =0.2.1, =0.2.0-next.29255833, =0.4.0-next.ff386514 and more Source...

@ftnk/electron-prebuilt-compile (1.7.3), @philipptrenz/photo-booth (>=1.0.1, <=1.0.6) +68 more potentially affected by CVE-2018-15685 via electron (>=1.7.0, <=1.7.13)

electron NPM version =1.7.0, =1.0.1, =1.0.0, =1.0.1, =0.4.0-next.64347695, =0.2.0-next.0148a1fd, =0.4.0-next.64347695, =0.2.0-next.0148a1fd, =0.2.0-next.0148a1fd, =0.2.0-next.29255833, =0.2.0-next.29255833, =0.2.0-next.0148a1fd, =0.2.1, =0.2.0-next.29255833, =0.4.0-next.ff386514 and more Source...

Exploit for Insecure Default Initialization of Resource in Electronjs Electron

CVE-2018-15685 - Electron WebPreferences Remote Code Execution...

CVE-2018-15685

GitHub Electron 1.7.15, 1.8.7, 2.0.7, and 3.0.0-beta.6, in certain scenarios involving IFRAME elements and "nativeWindowOpen: true" or "sandbox: true" options, is affected by a WebPreferences vulnerability that can be leveraged to perform remote code execution...

CVE-2018-15685

GitHub Electron 1.7.15, 1.8.7, 2.0.7, and 3.0.0-beta.6, in certain scenarios involving IFRAME elements and "nativeWindowOpen: true" or "sandbox: true" options, is affected by a WebPreferences vulnerability that can be leveraged to perform remote code execution...

Remote code execution

GitHub Electron 1.7.15, 1.8.7, 2.0.7, and 3.0.0-beta.6, in certain scenarios involving IFRAME elements and "nativeWindowOpen: true" or "sandbox: true" options, is affected by a WebPreferences vulnerability that can be leveraged to perform remote code execution...

CVE-2018-15685

GitHub Electron 1.7.15, 1.8.7, 2.0.7, and 3.0.0-beta.6, in certain scenarios involving IFRAME elements and "nativeWindowOpen: true" or "sandbox: true" options, is affected by a WebPreferences vulnerability that can be leveraged to perform remote code execution...

CVE-2018-15685

GitHub Electron 1.7.15, 1.8.7, 2.0.7, and 3.0.0-beta.6, in certain scenarios involving IFRAME elements and "nativeWindowOpen: true" or "sandbox: true" options, is affected by a WebPreferences vulnerability that can be leveraged to perform remote code execution...

@felixrieseberg/electron-prebuilt-compile (>=3.0.0-beta.1, <=3.0.0-beta.6), electron-prebuilt-compile (>=3.0.0-beta.1, <=3.0.0-beta.5) potentially affected by CVE-2018-15685 via electron (>=3.0.0-beta.1, <=3.0.0-beta.6)

electron NPM version =3.0.0-beta.1, =3.0.0-beta.1, =3.0.0-beta.1, =3.0.0-beta.5 Source cves: CVE-2018-15685 Source advisory: MEND:CVE-2018-15685...

@ftnk/electron-prebuilt-compile (1.7.3), @philipptrenz/photo-booth (>=1.0.1, <=1.0.6) +68 more potentially affected by CVE-2018-15685 via electron (>=1.7.0, <=1.7.13)

electron NPM version =1.7.0, =1.0.1, =1.0.0, =1.0.1, =0.4.0-next.64347695, =0.2.0-next.0148a1fd, =0.4.0-next.64347695, =0.2.0-next.0148a1fd, =0.2.0-next.0148a1fd, =0.2.0-next.29255833, =0.2.0-next.29255833, =0.2.0-next.0148a1fd, =0.2.1, =0.2.0-next.29255833, =0.4.0-next.ff386514 and more Source...

@devpodio/application-manager (>=0.3.16, <=0.3.20), @devpodio/bunyan (>=0.3.16, <=0.3.20) +158 more potentially affected by CVE-2018-15685 via electron (>=1.8.1, <=1.8.7)

electron NPM version =1.8.1, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.16, =0.3.20 and more Source cves: CVE-2018-15685 Source advisory: MEND:CVE-2018-15685...

@felixrieseberg/electron-prebuilt-compile (>=2.0.0, <=2.0.8-nightly.20180820), @ngx-electron/cli (>=0.0.3, <=0.0.10) +18 more potentially affected by CVE-2018-15685 via electron (>=2.0.0, <=2.0.8-nightly.20180820)

electron NPM version =2.0.0, =2.0.0, =0.0.3, =2.1.0, =0.0.4, =2.0.0, =0.0.10, =19.1.0, =0.19.0, =0.4.0, =0.5.0 and more Source cves: CVE-2018-15685 Source advisory: MEND:CVE-2018-15685...

CVE-2018-15685

GitHub Electron versions 1.7.15, 1.8.7, 2.0.7, and 3.0.0-beta.6 are affected by a WebPreferences vulnerability when using IFRAME with nativeWindowOpen: true or sandbox: true, enabling remote code execution. The issue arises in Electron’s WebPreferences handling and can be triggered in nested wind...

Active Directory Privilege Relationships: BloodHound

BloodHound is a single page Javascript web application, built on top of Linkurious , compiled with Electron , with a Neo4j database fed by a PowerShell ingestor . BloodHound uses graph theory to reveal the hidden and often unintended relationships within an Active Directory environment. Attacks c...

Electron WebPreferences Remote Command Execution Vulnerability

Electron is an open source library developed by Github to build cross-platform desktop applications using HTML, CSS and JavaScript.Electron accomplishes this by merging Chromium and Node.js into the same runtime environment and applications for Mac, Windows and Linux systems. A remote command...

CVE-2018-15685: Initialization of a Resource with an Insecure Default

GitHub Electron 1.7.15, 1.8.7, 2.0.7, and 3.0.0-beta.6, in certain scenarios involving IFRAME elements and "nativeWindowOpen: true" or "sandbox: true" options, is affected by a WebPreferences vulnerability that can be leveraged to perform remote code execution...

PT-2018-1522

Name of the Vulnerable Software and Affected Versions GitHub Electron versions 1.7.15 through 1.7.15 GitHub Electron versions 1.8.7 through 1.8.7 GitHub Electron versions 2.0.7 through 2.0.7 GitHub Electron versions 3.0.0-beta.6 through 3.0.0-beta.6 Description The issue is caused by errors in...

GHSA-4W88-RJJ3-X7WP Chromium Remote Code Execution in electron

Affected versions of ElectronJS are susceptible to a remote code execution vulnerability that occurs when an affected application access remote content, even if the sandbox option is enabled. Recommendation Update to electron version 1.7.8 or later...