Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:35993
HistoryJun 15, 2022 - 3:57 a.m.

Privilege Escalation

2022-06-1503:57:55
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
251
electron
privilege escalation
vulnerability
software
ipc messages

EPSS

0.003

Percentile

66.0%

JSON

electron is vulnerable to privilege escalation. When the nodeIntegrationInSubFrames enable, An attacker can get access to a new renderer process within JS execution, and if the application exposes IPC messages without IPC senderFrame validation, leading to gaining access to confidential data in ipcRenderer

Related

osv 2
cvelist 1
prion 1
nvd 1
cve 1
github 1
githubexploit 1
ibm 1
osv
osv
CVE-2022-29247
2022-06-13 21:15:07
Compromised child renderer processes could obtain IPC access without nodeIntegrationInSubFrames being enabled
2022-06-16 23:14:33
cvelist
cvelist
CVE-2022-29247 Exposure of Resource to Wrong Sphere in Electron
2022-06-13 21:05:10
prion
prion
Design/Logic Flaw
2022-06-13 21:15:00
nvd
nvd
CVE-2022-29247
2022-06-13 21:15:07
cve
cve
CVE-2022-29247
2022-06-13 21:15:07
github
github
Compromised child renderer processes could obtain IPC access without nodeIntegrationInSubFrames being enabled
2022-06-16 23:14:33
githubexploit
githubexploit
Exploit for Exposure of Resource to Wrong Sphere in Electronjs Electron
2022-08-16 14:06:15
ibm
ibm
Security Bulletin: IBM App Connect Enterprise is vulnerable to a remote attacker due to the electron module (CVE-2022-29247, CVE-2022-36077)
2022-12-12 09:16:36

EPSS

0.003

Percentile

66.0%

JSON
Related for VERACODE:35993
osv2cvelist1prion1nvd1cve1github1githubexploit1ibm1