Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.9, 40.9.2, 41.2.1, and 42.0.0-beta.3, the DevTools reveal in file manager action could launch the target file rather than reveal it. An attacker with a separate means of running script inside the DevTools frontend, such as a malicious DevTools extension, could use showItemInFolder handling to execute native code outside the sandbox when DevTools is opened for windows exposed to untrusted content or untrusted DevTools extensions.
This issue is fixed in 39.8.9, 40.9.2, 41.2.1, and 42.0.0-beta.3.
Attack Parameters
Attack Vector
Local
Requires local access
Attack Complexity
High
Difficult to exploit
Privileges Required
High
Admin privileges needed
User Interaction
Required
User action required
Impact Assessment
Confidentiality
High
Complete data leak
Integrity
High
Complete data modification
Availability
None
No disruption
CVSS Vector v3.1
Weakness Type (CWE)
Vulnerable Products 11
| Configuration | From (including) | Up to (excluding) |
|---|---|---|
|
Electronjs Electron
cpe:2.3:a:electronjs:electron:*:*:*:*:*:node.js:*:*
|
— |
39.8.9
|
|
Electronjs Electron
cpe:2.3:a:electronjs:electron:*:*:*:*:*:node.js:*:*
|
40.0.0
|
40.9.2
|
|
Electronjs Electron
cpe:2.3:a:electronjs:electron:*:*:*:*:*:node.js:*:*
|
41.0.0
|
41.2.1
|
|
Electronjs Electron
cpe:2.3:a:electronjs:electron:42.0.0:alpha1:*:*:*:node.js:*:*
|
— | — |
|
Electronjs Electron
cpe:2.3:a:electronjs:electron:42.0.0:alpha2:*:*:*:node.js:*:*
|
— | — |
|
Electronjs Electron
cpe:2.3:a:electronjs:electron:42.0.0:alpha3:*:*:*:node.js:*:*
|
— | — |
|
Electronjs Electron
cpe:2.3:a:electronjs:electron:42.0.0:alpha4:*:*:*:node.js:*:*
|
— | — |
|
Electronjs Electron
cpe:2.3:a:electronjs:electron:42.0.0:alpha5:*:*:*:node.js:*:*
|
— | — |
|
Electronjs Electron
cpe:2.3:a:electronjs:electron:42.0.0:alpha6:*:*:*:node.js:*:*
|
— | — |
|
Electronjs Electron
cpe:2.3:a:electronjs:electron:42.0.0:beta1:*:*:*:node.js:*:*
|
— | — |
|
Electronjs Electron
cpe:2.3:a:electronjs:electron:42.0.0:beta2:*:*:*:node.js:*:*
|
— | — |
References 13
https://github.com/electron/electron/commit/10fb5b39c5287f70c4bbcab4c24197f3871…
security-advisories@github.com
https://github.com/electron/electron/commit/1b8a298d629d5a642c816ea5f7505359de1…
security-advisories@github.com
https://github.com/electron/electron/commit/27bf1cae9274d5025684c7268496f435b7e…
security-advisories@github.com
https://github.com/electron/electron/commit/7a1eb7e5585991b3726cedb890a6244f327…
security-advisories@github.com
https://github.com/electron/electron/pull/50937
security-advisories@github.com
https://github.com/electron/electron/pull/50938
security-advisories@github.com
https://github.com/electron/electron/pull/51114
security-advisories@github.com
https://github.com/electron/electron/pull/51115
security-advisories@github.com
https://github.com/electron/electron/releases/tag/v39.8.9
security-advisories@github.com
https://github.com/electron/electron/releases/tag/v40.9.2
security-advisories@github.com
https://github.com/electron/electron/releases/tag/v41.2.1
security-advisories@github.com
https://github.com/electron/electron/releases/tag/v42.0.0-beta.3
security-advisories@github.com
https://github.com/electron/electron/security/advisories/GHSA-f2r8-jv7c-xqmp
security-advisories@github.com