@finsemble/finsemble-electron-adapter (>=7.0.0-beta.2, <=7.0.1), @manniwatch/client-desktop (>=0.28.3, <=0.29.1) +9 more potentially affected by CVE-2022-29247 via electron (>=16.0.2, <=16.2.3)

🗓️ 16 Jun 2022 23:14:33Reported by Vulners OSVType

Electron 16.0.2-16.2.3 vulnerable via CVE-2022-29247; 11 packages affected through transitive dependency.

Reporter	Title	Published	Views	Family All 16
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to a remote attacker due to the electron module (CVE-2022-29247, CVE-2022-36077)	12 Dec 202209:16	–	ibm
BDU FSTEC	The vulnerability of the `nodeIntegrationInSubFrames` parameter in the software platform for creating Electron applications allows a hacker to disclose protected information.	19 Aug 202200:00	–	bdu_fstec
Circl	CVE-2022-29247	14 Jun 202200:17	–	circl
CNNVD	Electron 安全漏洞	13 Jun 202200:00	–	cnnvd
CVE	CVE-2022-29247	13 Jun 202221:05	–	cve
Cvelist	CVE-2022-29247 Exposure of Resource to Wrong Sphere in Electron	13 Jun 202221:05	–	cvelist
EUVD	EUVD-2022-6098	3 Oct 202520:07	–	euvd
Github Security Blog	Compromised child renderer processes could obtain IPC access without nodeIntegrationInSubFrames being enabled	16 Jun 202223:14	–	github
NVD	CVE-2022-29247	13 Jun 202221:15	–	nvd
OSV	GHSA-MQ8J-3H7H-P8G7 Compromised child renderer processes could obtain IPC access without nodeIntegrationInSubFrames being enabled	16 Jun 202223:14	–	osv