PT-2020-17866
CVE-2020-4077
·
تاريخ النشر
2020-07-07
·
تاريخ التحديث
2020-07-13
الوصف من
CVSS 3.1
7.7
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Electron versions prior to 7.2.4
Electron versions prior to 8.2.4
Electron versions prior to 9.0.0-beta21
Description
The issue is a context isolation bypass, allowing code running in the main world context in the renderer to reach into the isolated Electron context and perform privileged actions. This affects apps using both
contextIsolation and contextBridge.Recommendations
For versions prior to 7.2.4, update to version 7.2.4 or later.
For versions prior to 8.2.4, update to version 8.2.4 or later.
For versions prior to 9.0.0-beta21, update to version 9.0.0-beta21 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾