by

May 14, 2018

Vulnerability Notification: Electron setAsDefaultProtocolClient Command Injection

[Overview] Electron is an open source framework for developing desktop GUI applications that enables developers to build native programs across MAC, Windows, and Linux using web technologies such as JavaScript, HTML, and CSS. Electron recently fixed an Electron remote code execution vulnerability that affects custom protocol handlers. [Vulnerability Details] CVE-2018-1000006: The vulnerability is caused by…
More