PT-2018-1522 · Github · Github Electron

Matt Austin · Published 2018-08-22 · Updated 2019-10-03 · CVE-2018-15685

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GitHub Electron versions 1.7.15 through 1.7.15 GitHub Electron versions 1.8.7 through 1.8.7 GitHub Electron versions 2.0.7 through 2.0.7 GitHub Electron versions 3.0.0-beta.6 through 3.0.0-beta.6

Description The issue is caused by errors in access control and can be leveraged to perform remote code execution. In certain scenarios involving IFRAME elements and nativeWindowOpen: true or sandbox: true options, the vulnerability can be exploited. This can allow a remote attacker to execute arbitrary code using a specially crafted iframe element.

Recommendations Upgrade to version 1.7.16 or later for GitHub Electron version 1.7.15. Upgrade to version 1.8.8 or later for GitHub Electron version 1.8.7. Upgrade to version 2.0.8 or later for GitHub Electron version 2.0.7. Upgrade to version 3.0.0-beta.7 or later for GitHub Electron version 3.0.0-beta.6.

Exploit

Fix

Weakness Enumeration

CWE-264

CWE-1188

Related Identifiers

BDU:2018-01077

CVE-2018-15685

GHSA-HV9C-QWQG-QJ3V

Affected Products

Github Electron

References · 16

• 🔥 https://github.com/matt-/CVE-2018-15685 · Exploit
• 🔥 https://exploit-db.com/exploits/45272 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-15685 · Security Note
• https://electronjs.org/blog/web-preferences-fix · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-hv9c-qwqg-qj3v · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-15685 · Vendor Advisory
• https://bdu.fstec.ru/vul/2018-01077 · Security Note
• https://github.com/electron/electron · Note
• https://github.com/electron/electron/commit/bab968ca776be28791e4dddfd50c86bd5fae62fa · Note
• https://github.com/electron/electron/commit/ef0a6d9a1c96efc4657c6dd3a6624eba969f095b · Note
• https://github.com/electron/electron/commit/519a02d8d4d28e8a467acb40fb26172a80c9454f · Note
• https://github.com/electron/electron/commit/80221e52d93a96ea704cb6748ead669c55cff504 · Note
• https://npmjs.com/advisories/732 · Note
• https://securitylab.ru/vulnerability/495428.php · Note
• https://medium.com/@contrastsec/cve-2018-15685-electron-webpreferences-remote-code-execution-finding-fbe3399225f4 · Note