CVSS 9.9 · Critical EPSS 1,0%
Kerentanan Trust Boundary Violation pada electronjs electron. Skor CVSS 3.1 9.9 (Critical) menurut NVD.
In Electron before versions 7.2.4, 8.2.4, and 9.0.0-beta21, there is a context isolation bypass. Code running in the main world context in the renderer can reach into the isolated Electron context and perform privileged actions. Apps using both `contextIsolation` and `contextBridge` are affected. This is fixed in versions 9.0.0-beta.21, 8.2.4 and 7.2.4.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| electronjs | electron | Versi 7.0.0 hingga sebelum 7.2.4 |
| electronjs | electron | Versi 8.0.0 hingga sebelum 8.2.4 |
| electronjs | electron | Versi 9.0.0 |
| electronjs | electron | Versi 9.0.0 beta1 |
| electronjs | electron | Versi 9.0.0 beta10 |
| electronjs | electron | Versi 9.0.0 beta11 |
| electronjs | electron | Versi 9.0.0 beta12 |
| electronjs | electron | Versi 9.0.0 beta13 |
| electronjs | electron | Versi 9.0.0 beta14 |
| electronjs | electron | Versi 9.0.0 beta15 |
| electronjs | electron | Versi 9.0.0 beta16 |
| electronjs | electron | Versi 9.0.0 beta17 |
| electronjs | electron | Versi 9.0.0 beta18 |
| electronjs | electron | Versi 9.0.0 beta19 |
| electronjs | electron | Versi 9.0.0 beta2 |
| electronjs | electron | Versi 9.0.0 beta20 |
| electronjs | electron | Versi 9.0.0 beta3 |
| electronjs | electron | Versi 9.0.0 beta4 |
| electronjs | electron | Versi 9.0.0 beta5 |
| electronjs | electron | Versi 9.0.0 beta6 |
| electronjs | electron | Versi 9.0.0 beta7 |
| electronjs | electron | Versi 9.0.0 beta8 |
| electronjs | electron | Versi 9.0.0 beta9 |