// For flags

CVE-2020-15215

Context isolation bypass in Electron

Severity Score

5.6
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Electron before versions 11.0.0-beta.6, 10.1.2, 9.3.1 or 8.5.2 is vulnerable to a context isolation bypass. Apps using both `contextIsolation` and `sandbox: true` are affected. Apps using both `contextIsolation` and `nodeIntegrationInSubFrames: true` are affected. This is a context isolation bypass, meaning that code running in the main world context in the renderer can reach into the isolated Electron context and perform privileged actions.

Electron anteriores a las versiones 11.0.0-beta.6, 10.1.2, 9.3.1 o 8.5.2, es vulnerable a una omisión de aislamiento de contexto. Las aplicaciones que usan tanto "contextIsolation" como "sandbox: true" están afectadas. Las aplicaciones que usan "contextIsolation" y "nodeIntegrationInSubFrames: true" están afectadas. Esta es una omisión de aislamiento de contexto, lo que significa que el código que se ejecuta en el contexto main world en el renderizador puede llegar al contexto de Electron aislado y realizar acciones privilegiadas

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
Low
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2020-06-25 CVE Reserved
  • 2020-10-06 CVE Published
  • 2023-06-22 EPSS Updated
  • 2024-08-04 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-668: Exposure of Resource to Wrong Sphere
  • CWE-693: Protection Mechanism Failure
CAPEC
References (1)
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
8.0.0
Search vendor "Electronjs" for product "Electron" and version "8.0.0"
-
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
8.0.0
Search vendor "Electronjs" for product "Electron" and version "8.0.0"
beta0
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
8.0.0
Search vendor "Electronjs" for product "Electron" and version "8.0.0"
beta1
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
8.0.0
Search vendor "Electronjs" for product "Electron" and version "8.0.0"
beta2
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
8.0.0
Search vendor "Electronjs" for product "Electron" and version "8.0.0"
beta3
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
8.0.0
Search vendor "Electronjs" for product "Electron" and version "8.0.0"
beta4
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
8.0.0
Search vendor "Electronjs" for product "Electron" and version "8.0.0"
beta5
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
8.0.0
Search vendor "Electronjs" for product "Electron" and version "8.0.0"
beta6
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
8.0.0
Search vendor "Electronjs" for product "Electron" and version "8.0.0"
beta7
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
8.0.0
Search vendor "Electronjs" for product "Electron" and version "8.0.0"
beta8
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
8.0.0
Search vendor "Electronjs" for product "Electron" and version "8.0.0"
beta9
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
8.0.1
Search vendor "Electronjs" for product "Electron" and version "8.0.1"
-
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
8.0.2
Search vendor "Electronjs" for product "Electron" and version "8.0.2"
-
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
8.0.3
Search vendor "Electronjs" for product "Electron" and version "8.0.3"
-
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
8.1.0
Search vendor "Electronjs" for product "Electron" and version "8.1.0"
-
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
8.1.1
Search vendor "Electronjs" for product "Electron" and version "8.1.1"
-
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
8.2.0
Search vendor "Electronjs" for product "Electron" and version "8.2.0"
-
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
8.2.1
Search vendor "Electronjs" for product "Electron" and version "8.2.1"
-
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
8.2.2
Search vendor "Electronjs" for product "Electron" and version "8.2.2"
-
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
8.2.3
Search vendor "Electronjs" for product "Electron" and version "8.2.3"
-
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
8.2.4
Search vendor "Electronjs" for product "Electron" and version "8.2.4"
-
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
8.2.5
Search vendor "Electronjs" for product "Electron" and version "8.2.5"
-
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
8.3.0
Search vendor "Electronjs" for product "Electron" and version "8.3.0"
-
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
8.3.1
Search vendor "Electronjs" for product "Electron" and version "8.3.1"
-
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
8.3.2
Search vendor "Electronjs" for product "Electron" and version "8.3.2"
-
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
8.3.3
Search vendor "Electronjs" for product "Electron" and version "8.3.3"
-
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
8.3.4
Search vendor "Electronjs" for product "Electron" and version "8.3.4"
-
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
8.4.0
Search vendor "Electronjs" for product "Electron" and version "8.4.0"
-
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
8.4.1
Search vendor "Electronjs" for product "Electron" and version "8.4.1"
-
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
8.5.0
Search vendor "Electronjs" for product "Electron" and version "8.5.0"
-
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
8.5.1
Search vendor "Electronjs" for product "Electron" and version "8.5.1"
-
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
9.0.0
Search vendor "Electronjs" for product "Electron" and version "9.0.0"
-
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
9.0.0
Search vendor "Electronjs" for product "Electron" and version "9.0.0"
beta0
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
9.0.0
Search vendor "Electronjs" for product "Electron" and version "9.0.0"
beta1
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
9.0.0
Search vendor "Electronjs" for product "Electron" and version "9.0.0"
beta10
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
9.0.0
Search vendor "Electronjs" for product "Electron" and version "9.0.0"
beta11
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
9.0.0
Search vendor "Electronjs" for product "Electron" and version "9.0.0"
beta12
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
9.0.0
Search vendor "Electronjs" for product "Electron" and version "9.0.0"
beta13
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
9.0.0
Search vendor "Electronjs" for product "Electron" and version "9.0.0"
beta14
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
9.0.0
Search vendor "Electronjs" for product "Electron" and version "9.0.0"
beta15
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
9.0.0
Search vendor "Electronjs" for product "Electron" and version "9.0.0"
beta16
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
9.0.0
Search vendor "Electronjs" for product "Electron" and version "9.0.0"
beta17
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
9.0.0
Search vendor "Electronjs" for product "Electron" and version "9.0.0"
beta18
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
9.0.0
Search vendor "Electronjs" for product "Electron" and version "9.0.0"
beta19
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
9.0.0
Search vendor "Electronjs" for product "Electron" and version "9.0.0"
beta2
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
9.0.0
Search vendor "Electronjs" for product "Electron" and version "9.0.0"
beta20
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
9.0.0
Search vendor "Electronjs" for product "Electron" and version "9.0.0"
beta3
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
9.0.0
Search vendor "Electronjs" for product "Electron" and version "9.0.0"
beta4
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
9.0.0
Search vendor "Electronjs" for product "Electron" and version "9.0.0"
beta5
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
9.0.0
Search vendor "Electronjs" for product "Electron" and version "9.0.0"
beta6
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
9.0.0
Search vendor "Electronjs" for product "Electron" and version "9.0.0"
beta7
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
9.0.0
Search vendor "Electronjs" for product "Electron" and version "9.0.0"
beta8
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
9.0.0
Search vendor "Electronjs" for product "Electron" and version "9.0.0"
beta9
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
9.0.1
Search vendor "Electronjs" for product "Electron" and version "9.0.1"
-
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
9.0.2
Search vendor "Electronjs" for product "Electron" and version "9.0.2"
-
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
9.0.3
Search vendor "Electronjs" for product "Electron" and version "9.0.3"
-
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
9.0.4
Search vendor "Electronjs" for product "Electron" and version "9.0.4"
-
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
9.0.5
Search vendor "Electronjs" for product "Electron" and version "9.0.5"
-
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
9.0.6
Search vendor "Electronjs" for product "Electron" and version "9.0.6"
-
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
9.1.0
Search vendor "Electronjs" for product "Electron" and version "9.1.0"
-
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
9.1.1
Search vendor "Electronjs" for product "Electron" and version "9.1.1"
-
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
9.1.2
Search vendor "Electronjs" for product "Electron" and version "9.1.2"
-
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
9.2.0
Search vendor "Electronjs" for product "Electron" and version "9.2.0"
-
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
9.2.1
Search vendor "Electronjs" for product "Electron" and version "9.2.1"
-
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
9.3.0
Search vendor "Electronjs" for product "Electron" and version "9.3.0"
-
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
10.0.0
Search vendor "Electronjs" for product "Electron" and version "10.0.0"
-
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
10.0.0
Search vendor "Electronjs" for product "Electron" and version "10.0.0"
beta1
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
10.0.0
Search vendor "Electronjs" for product "Electron" and version "10.0.0"
beta10
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
10.0.0
Search vendor "Electronjs" for product "Electron" and version "10.0.0"
beta11
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
10.0.0
Search vendor "Electronjs" for product "Electron" and version "10.0.0"
beta12
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
10.0.0
Search vendor "Electronjs" for product "Electron" and version "10.0.0"
beta13
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
10.0.0
Search vendor "Electronjs" for product "Electron" and version "10.0.0"
beta14
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
10.0.0
Search vendor "Electronjs" for product "Electron" and version "10.0.0"
beta15
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
10.0.0
Search vendor "Electronjs" for product "Electron" and version "10.0.0"
beta16
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
10.0.0
Search vendor "Electronjs" for product "Electron" and version "10.0.0"
beta17
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
10.0.0
Search vendor "Electronjs" for product "Electron" and version "10.0.0"
beta18
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
10.0.0
Search vendor "Electronjs" for product "Electron" and version "10.0.0"
beta19
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
10.0.0
Search vendor "Electronjs" for product "Electron" and version "10.0.0"
beta2
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
10.0.0
Search vendor "Electronjs" for product "Electron" and version "10.0.0"
beta20
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
10.0.0
Search vendor "Electronjs" for product "Electron" and version "10.0.0"
beta21
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
10.0.0
Search vendor "Electronjs" for product "Electron" and version "10.0.0"
beta22
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
10.0.0
Search vendor "Electronjs" for product "Electron" and version "10.0.0"
beta23
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
10.0.0
Search vendor "Electronjs" for product "Electron" and version "10.0.0"
beta24
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
10.0.0
Search vendor "Electronjs" for product "Electron" and version "10.0.0"
beta25
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
10.0.0
Search vendor "Electronjs" for product "Electron" and version "10.0.0"
beta3
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
10.0.0
Search vendor "Electronjs" for product "Electron" and version "10.0.0"
beta4
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
10.0.0
Search vendor "Electronjs" for product "Electron" and version "10.0.0"
beta5
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
10.0.0
Search vendor "Electronjs" for product "Electron" and version "10.0.0"
beta6
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
10.0.0
Search vendor "Electronjs" for product "Electron" and version "10.0.0"
beta7
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
10.0.0
Search vendor "Electronjs" for product "Electron" and version "10.0.0"
beta8
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
10.0.0
Search vendor "Electronjs" for product "Electron" and version "10.0.0"
beta9
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
10.0.1
Search vendor "Electronjs" for product "Electron" and version "10.0.1"
-
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
10.1.0
Search vendor "Electronjs" for product "Electron" and version "10.1.0"
-
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
10.1.1
Search vendor "Electronjs" for product "Electron" and version "10.1.1"
-
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
11.0.0
Search vendor "Electronjs" for product "Electron" and version "11.0.0"
beta0
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
11.0.0
Search vendor "Electronjs" for product "Electron" and version "11.0.0"
beta1
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
11.0.0
Search vendor "Electronjs" for product "Electron" and version "11.0.0"
beta2
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
11.0.0
Search vendor "Electronjs" for product "Electron" and version "11.0.0"
beta3
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
11.0.0
Search vendor "Electronjs" for product "Electron" and version "11.0.0"
beta4
Affected
Electronjs
Search vendor "Electronjs"
Electron
Search vendor "Electronjs" for product "Electron"
11.0.0
Search vendor "Electronjs" for product "Electron" and version "11.0.0"
beta5
Affected