Lucene search
Veracode Vulnerability DatabaseVERACODE:27540HistoryOct 07, 2020 - 5:04 a.m.
Sandbox Restrictions Bypass
2020-10-0705:04:37
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
269
electron
sandbox
restrictions
EPSS
0.001
Percentile
39.5%
electron is vulnerable to sandbox restrictions bypass. Apps using both contextIsolation and sandbox: true/nativeWindowOpen: true/nodeIntegrationInSubFrames: true allow the code running in the main world context in the renderer to reach into the isolated electron context and perform privileged actions.
Related
cvelist
cvelist
CVE-2020-15215 Context isolation bypass in Electron
2020-10-06 18:00:17
prion
prion
Design/Logic Flaw
2020-10-06 18:15:00
osv
osv
Context isolation bypass in Electron
2020-10-06 17:46:40
CVE-2020-15215
2020-10-06 18:15:14
cve
cve
CVE-2020-15215
2020-10-06 18:15:14
nvd
nvd
CVE-2020-15215
2020-10-06 18:15:14
github
github
Context isolation bypass in Electron
2020-10-06 17:46:40