PT-2021-11228 · Electron · Electron

Marshallofsound + 1 · Published 2021-01-28 · Updated 2021-02-04 · CVE-2020-26272

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: Electron versions prior to 9.4.0 Electron versions prior to 10.2.0 Electron versions prior to 11.1.0 Electron versions prior to 12.0.0-beta.9

Description: IPC messages sent from the main process to a subframe in the renderer process, through webContents.sendToFrame, event.reply, or when using the remote module, can in some cases be delivered to the wrong frame. If an app uses remote, calls webContents.sendToFrame, or calls event.reply in an IPC message handler, then it is impacted by this issue.

Recommendations: For versions prior to 9.4.0, update to version 9.4.0 or later. For versions prior to 10.2.0, update to version 10.2.0 or later. For versions prior to 11.1.0, update to version 11.1.0 or later. For versions prior to 12.0.0-beta.9, update to version 12.0.0-beta.9 or later. As a temporary workaround, consider avoiding the use of remote, webContents.sendToFrame, and event.reply in IPC message handlers until a patch is applied.

Fix

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-668

Related Identifiers

CVE-2020-26272

GHSA-HVF8-H2QH-37M9

Affected Products

Electron

References · 13

• https://github.com/electron/electron/commit/07a1c2a3e5845901f7e2eda9506695be58edc73c · Patch
• https://electronjs.org/releases/stable?version=9#9.4.0 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-26272 · Security Note
• https://osv.dev/vulnerability/GHSA-hvf8-h2qh-37m9 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-26272 · Vendor Advisory
• https://github.com/electron/electron/commit/429400040ecb16a21d19936658579e65a797e4cc · Note
• https://github.com/electron/electron/pull/26875 · Note
• https://github.com/electron/electron/commit/36c695ce2a7e22c07fe1e30c61c00d20371daee2 · Note
• https://github.com/electron/electron/commit/0bbd268eb4caf35604443df5ff196980dd49e208 · Note
• https://github.com/electron/electron/commit/5c8e7e8b7f485ceafa8b271086d7b87e1de9dedd · Note
• https://github.com/electron/electron/releases/tag/v9.4.0 · Note
• https://github.com/electron/electron/security/advisories/GHSA-hvf8-h2qh-37m9 · Note
• https://t.me/cibsecurity/22805 · Telegram Post