Vulnerability · Published Oct 6, 2020 · Assigned by GitHub_M

CVE-2020-15215Context isolation bypass in Electron

Medium 5.6

In plain English

A medium-severity security flaw in electron from electron. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 53% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.6Medium

Exploit odds (30 days)0.7%top 47.3% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack tooling1Public PoC

Official description

Electron before versions 11.0.0-beta.6, 10.1.2, 9.3.1 or 8.5.2 is vulnerable to a context isolation bypass. Apps using both `contextIsolation` and `sandbox: true` are affected. Apps using both `contextIsolation` and `nodeIntegrationInSubFrames: true` are affected. This is a context isolation bypass, meaning that code running in the main world context in the renderer can reach into the isolated Electron context and perform privileged actions.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
npm	electron	8.5.2	GHSA-56pc-6jqp-xqj8
npm	electron	9.3.1	GHSA-56pc-6jqp-xqj8
npm	electron	10.1.2	GHSA-56pc-6jqp-xqj8
npm	electron	11.0.0-beta.6	GHSA-56pc-6jqp-xqj8

Affected products (as reported)

Vendor	Product	Versions
electron	electron	>= 8.0.0-beta.0, < 8.5.2>= 9.0.0-beta.0, < 9.3.1>= 10.0.0-beta.0, < 10.1.2>= 11.0.0-beta.0, < 11.0.0-beta.6

Weakness: CWE-693, CWE-668 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

References

https://github.com/electron/electron/security/advisories/GHSA-56pc-6jqp-xqj8 x_refsource_CONFIRM