1 matches found
Electron: Named window.open targets not scoped to the opener's browsing context
Impact When a renderer calls window.open with a target name, Electron did not correctly scope the named-window lookup to the opener's browsing context group. A renderer could navigate an existing child window that was opened by a different, unrelated renderer if both used the same target name. If...
8.8CVSS6.2AI score0.003EPSS
SaveExploits0References7Affected Software1
20