electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.186, electerm allows an authenticated WebSocket client to invoke unintended internal functions through client-controlled func values in upgrade-func in src/app/server/dispatch-center.js and handleFs in src/app/server/fs.js, exposing Upgrade and fsExport methods that can execute commands, open files, mutate the filesystem, or terminate the process. This issue is fixed in version 3.15.186.
Attack Parameters
Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Privileges Required
Low
Basic privileges needed
User Interaction
None
No user interaction needed
Impact Assessment
Confidentiality
High
Complete data leak
Integrity
High
Complete data modification
Availability
High
Complete denial of service
CVSS Vector v3.1
Weakness Type (CWE)
Vulnerable Products
electerm:electerm
References 4
https://github.com/electerm/electerm/security/advisories/GHSA-8chw-jwc5-8587
https://github.com/electerm/electerm/security/advisories/GHSA-8chw-jwc5-8587
https://github.com/electerm/electerm/pull/4447
https://github.com/electerm/electerm/pull/4447
https://github.com/electerm/electerm/commit/b1729eb67a4cd9cf1182de69dc2c8e05193…
https://github.com/electerm/electerm/commit/b1729eb67a4cd9cf1182de69dc2c8e051931740f
https://github.com/electerm/electerm/releases/tag/v3.15.186
https://github.com/electerm/electerm/releases/tag/v3.15.186