PT-2024-21807 · Unknown · Electron-Builder

Bruno-1337 · Published 2024-03-04 · Updated 2025-12-03 · CVE-2024-27303

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions electron-builder versions prior to 24.13.2

Description A vulnerability in electron-builder for Windows allows an attacker to execute a malicious file named cmd.exe if it is placed in the same folder as the installer. The NSIS installer makes a system call to open cmd.exe via NSExec in the .nsh installer script. NSExec searches the current directory before searching PATH, which enables the attack. This issue is fixed in version 24.13.2.

Recommendations For versions prior to 24.13.2, update to version 24.13.2 to resolve the issue. As a temporary workaround, consider avoiding the use of the NSIS installer until the update is applied. Restrict access to the installer folder to minimize the risk of exploitation. Avoid placing any executable files in the same folder as the installer.

Exploit

Fix

Untrusted Search Path

Uncontrolled Search Path Element

Weakness Enumeration

CWE-426

CWE-427

Related Identifiers

CVE-2024-27303

GHSA-R4PF-3V7R-HH55

OPENSUSE-SU-2024:13782-1

Affected Products

Electron-Builder

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/27xxx/CVE-2024-27303.json · Exploit
• https://github.com/electron-userland/electron-builder/commit/8f4acff3c2d45c1cb07779bb3fe79644408ee387 · Patch
• https://github.com/electron-userland/electron-builder/security/advisories/GHSA-r4pf-3v7r-hh55 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-27303 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:13782-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-27303 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-r4pf-3v7r-hh55 · Vendor Advisory
• https://github.com/electron-userland/electron-builder · Note
• https://github.com/electron-userland/electron-builder/pull/8059 · Note
• https://goteleport.com/docs/ver/19.x/changelog/#1437-031124 · Note
• https://goteleport.com/docs/ver/19.x/changelog/#1513-030824 · Note
• https://t.me/cveNotify/144656 · Telegram Post
• https://t.me/cvenotify/73169 · Telegram Post
• https://suse.com/security/cve/CVE-2024-27303 · Note