PT-2018-1522 · Github · Github Electron

Matt Austin · Publicado 2018-08-22 · Atualizado 2019-10-03 · CVE-2018-15685

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GitHub Electron versions 1.7.15 through 1.7.15 GitHub Electron versions 1.8.7 through 1.8.7 GitHub Electron versions 2.0.7 through 2.0.7 GitHub Electron versions 3.0.0-beta.6 through 3.0.0-beta.6

Description The issue is caused by errors in access control and can be leveraged to perform remote code execution. In certain scenarios involving IFRAME elements and nativeWindowOpen: true or sandbox: true options, the vulnerability can be exploited. This can allow a remote attacker to execute arbitrary code using a specially crafted iframe element.

Recommendations Upgrade to version 1.7.16 or later for GitHub Electron version 1.7.15. Upgrade to version 1.8.8 or later for GitHub Electron version 1.8.7. Upgrade to version 2.0.8 or later for GitHub Electron version 2.0.7. Upgrade to version 3.0.0-beta.7 or later for GitHub Electron version 3.0.0-beta.6.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

CWE-1188

Identificadores relacionados

BDU:2018-01077

CVE-2018-15685

GHSA-HV9C-QWQG-QJ3V

Produtos afetados

Github Electron

Referências · 16

• 🔥 https://github.com/matt-/CVE-2018-15685 · Exploit
• 🔥 https://exploit-db.com/exploits/45272 · Exploit
• https://github.com/electron/electron · Nota
• https://github.com/electron/electron/commit/bab968ca776be28791e4dddfd50c86bd5fae62fa · Nota
• https://github.com/electron/electron/commit/ef0a6d9a1c96efc4657c6dd3a6624eba969f095b · Nota
• https://github.com/electron/electron/commit/519a02d8d4d28e8a467acb40fb26172a80c9454f · Nota
• https://github.com/electron/electron/commit/80221e52d93a96ea704cb6748ead669c55cff504 · Nota
• https://npmjs.com/advisories/732 · Nota
• https://securitylab.ru/vulnerability/495428.php · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-15685 · Nota de Segurança
• https://electronjs.org/blog/web-preferences-fix · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-hv9c-qwqg-qj3v · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-15685 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2018-01077 · Nota de Segurança
• https://medium.com/@contrastsec/cve-2018-15685-electron-webpreferences-remote-code-execution-finding-fbe3399225f4 · Nota