CVE-2020-15215
Context isolation bypass in Electron
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Electron before versions 11.0.0-beta.6, 10.1.2, 9.3.1 or 8.5.2 is vulnerable to a context isolation bypass. Apps using both `contextIsolation` and `sandbox: true` are affected. Apps using both `contextIsolation` and `nodeIntegrationInSubFrames: true` are affected. This is a context isolation bypass, meaning that code running in the main world context in the renderer can reach into the isolated Electron context and perform privileged actions.
Electron anteriores a las versiones 11.0.0-beta.6, 10.1.2, 9.3.1 o 8.5.2, es vulnerable a una omisión de aislamiento de contexto. Las aplicaciones que usan tanto "contextIsolation" como "sandbox: true" están afectadas. Las aplicaciones que usan "contextIsolation" y "nodeIntegrationInSubFrames: true" están afectadas. Esta es una omisión de aislamiento de contexto, lo que significa que el código que se ejecuta en el contexto main world en el renderizador puede llegar al contexto de Electron aislado y realizar acciones privilegiadas
CVSS Scores
SSVC
- Decision:-
Timeline
- 2020-06-25 CVE Reserved
- 2020-10-06 CVE Published
- 2023-06-22 EPSS Updated
- 2024-08-04 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-668: Exposure of Resource to Wrong Sphere
- CWE-693: Protection Mechanism Failure
CAPEC
References (1)
URL | Tag | Source |
---|---|---|
https://github.com/electron/electron/security/advisories/GHSA-56pc-6jqp-xqj8 | Third Party Advisory |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 8.0.0 Search vendor "Electronjs" for product "Electron" and version "8.0.0" | - |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 8.0.0 Search vendor "Electronjs" for product "Electron" and version "8.0.0" | beta0 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 8.0.0 Search vendor "Electronjs" for product "Electron" and version "8.0.0" | beta1 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 8.0.0 Search vendor "Electronjs" for product "Electron" and version "8.0.0" | beta2 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 8.0.0 Search vendor "Electronjs" for product "Electron" and version "8.0.0" | beta3 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 8.0.0 Search vendor "Electronjs" for product "Electron" and version "8.0.0" | beta4 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 8.0.0 Search vendor "Electronjs" for product "Electron" and version "8.0.0" | beta5 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 8.0.0 Search vendor "Electronjs" for product "Electron" and version "8.0.0" | beta6 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 8.0.0 Search vendor "Electronjs" for product "Electron" and version "8.0.0" | beta7 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 8.0.0 Search vendor "Electronjs" for product "Electron" and version "8.0.0" | beta8 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 8.0.0 Search vendor "Electronjs" for product "Electron" and version "8.0.0" | beta9 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 8.0.1 Search vendor "Electronjs" for product "Electron" and version "8.0.1" | - |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 8.0.2 Search vendor "Electronjs" for product "Electron" and version "8.0.2" | - |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 8.0.3 Search vendor "Electronjs" for product "Electron" and version "8.0.3" | - |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 8.1.0 Search vendor "Electronjs" for product "Electron" and version "8.1.0" | - |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 8.1.1 Search vendor "Electronjs" for product "Electron" and version "8.1.1" | - |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 8.2.0 Search vendor "Electronjs" for product "Electron" and version "8.2.0" | - |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 8.2.1 Search vendor "Electronjs" for product "Electron" and version "8.2.1" | - |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 8.2.2 Search vendor "Electronjs" for product "Electron" and version "8.2.2" | - |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 8.2.3 Search vendor "Electronjs" for product "Electron" and version "8.2.3" | - |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 8.2.4 Search vendor "Electronjs" for product "Electron" and version "8.2.4" | - |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 8.2.5 Search vendor "Electronjs" for product "Electron" and version "8.2.5" | - |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 8.3.0 Search vendor "Electronjs" for product "Electron" and version "8.3.0" | - |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 8.3.1 Search vendor "Electronjs" for product "Electron" and version "8.3.1" | - |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 8.3.2 Search vendor "Electronjs" for product "Electron" and version "8.3.2" | - |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 8.3.3 Search vendor "Electronjs" for product "Electron" and version "8.3.3" | - |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 8.3.4 Search vendor "Electronjs" for product "Electron" and version "8.3.4" | - |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 8.4.0 Search vendor "Electronjs" for product "Electron" and version "8.4.0" | - |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 8.4.1 Search vendor "Electronjs" for product "Electron" and version "8.4.1" | - |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 8.5.0 Search vendor "Electronjs" for product "Electron" and version "8.5.0" | - |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 8.5.1 Search vendor "Electronjs" for product "Electron" and version "8.5.1" | - |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 9.0.0 Search vendor "Electronjs" for product "Electron" and version "9.0.0" | - |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 9.0.0 Search vendor "Electronjs" for product "Electron" and version "9.0.0" | beta0 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 9.0.0 Search vendor "Electronjs" for product "Electron" and version "9.0.0" | beta1 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 9.0.0 Search vendor "Electronjs" for product "Electron" and version "9.0.0" | beta10 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 9.0.0 Search vendor "Electronjs" for product "Electron" and version "9.0.0" | beta11 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 9.0.0 Search vendor "Electronjs" for product "Electron" and version "9.0.0" | beta12 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 9.0.0 Search vendor "Electronjs" for product "Electron" and version "9.0.0" | beta13 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 9.0.0 Search vendor "Electronjs" for product "Electron" and version "9.0.0" | beta14 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 9.0.0 Search vendor "Electronjs" for product "Electron" and version "9.0.0" | beta15 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 9.0.0 Search vendor "Electronjs" for product "Electron" and version "9.0.0" | beta16 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 9.0.0 Search vendor "Electronjs" for product "Electron" and version "9.0.0" | beta17 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 9.0.0 Search vendor "Electronjs" for product "Electron" and version "9.0.0" | beta18 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 9.0.0 Search vendor "Electronjs" for product "Electron" and version "9.0.0" | beta19 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 9.0.0 Search vendor "Electronjs" for product "Electron" and version "9.0.0" | beta2 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 9.0.0 Search vendor "Electronjs" for product "Electron" and version "9.0.0" | beta20 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 9.0.0 Search vendor "Electronjs" for product "Electron" and version "9.0.0" | beta3 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 9.0.0 Search vendor "Electronjs" for product "Electron" and version "9.0.0" | beta4 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 9.0.0 Search vendor "Electronjs" for product "Electron" and version "9.0.0" | beta5 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 9.0.0 Search vendor "Electronjs" for product "Electron" and version "9.0.0" | beta6 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 9.0.0 Search vendor "Electronjs" for product "Electron" and version "9.0.0" | beta7 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 9.0.0 Search vendor "Electronjs" for product "Electron" and version "9.0.0" | beta8 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 9.0.0 Search vendor "Electronjs" for product "Electron" and version "9.0.0" | beta9 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 9.0.1 Search vendor "Electronjs" for product "Electron" and version "9.0.1" | - |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 9.0.2 Search vendor "Electronjs" for product "Electron" and version "9.0.2" | - |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 9.0.3 Search vendor "Electronjs" for product "Electron" and version "9.0.3" | - |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 9.0.4 Search vendor "Electronjs" for product "Electron" and version "9.0.4" | - |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 9.0.5 Search vendor "Electronjs" for product "Electron" and version "9.0.5" | - |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 9.0.6 Search vendor "Electronjs" for product "Electron" and version "9.0.6" | - |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 9.1.0 Search vendor "Electronjs" for product "Electron" and version "9.1.0" | - |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 9.1.1 Search vendor "Electronjs" for product "Electron" and version "9.1.1" | - |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 9.1.2 Search vendor "Electronjs" for product "Electron" and version "9.1.2" | - |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 9.2.0 Search vendor "Electronjs" for product "Electron" and version "9.2.0" | - |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 9.2.1 Search vendor "Electronjs" for product "Electron" and version "9.2.1" | - |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 9.3.0 Search vendor "Electronjs" for product "Electron" and version "9.3.0" | - |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0" | - |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0" | beta1 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0" | beta10 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0" | beta11 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0" | beta12 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0" | beta13 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0" | beta14 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0" | beta15 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0" | beta16 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0" | beta17 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0" | beta18 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0" | beta19 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0" | beta2 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0" | beta20 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0" | beta21 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0" | beta22 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0" | beta23 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0" | beta24 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0" | beta25 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0" | beta3 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0" | beta4 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0" | beta5 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0" | beta6 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0" | beta7 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0" | beta8 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0" | beta9 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 10.0.1 Search vendor "Electronjs" for product "Electron" and version "10.0.1" | - |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 10.1.0 Search vendor "Electronjs" for product "Electron" and version "10.1.0" | - |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 10.1.1 Search vendor "Electronjs" for product "Electron" and version "10.1.1" | - |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 11.0.0 Search vendor "Electronjs" for product "Electron" and version "11.0.0" | beta0 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 11.0.0 Search vendor "Electronjs" for product "Electron" and version "11.0.0" | beta1 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 11.0.0 Search vendor "Electronjs" for product "Electron" and version "11.0.0" | beta2 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 11.0.0 Search vendor "Electronjs" for product "Electron" and version "11.0.0" | beta3 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 11.0.0 Search vendor "Electronjs" for product "Electron" and version "11.0.0" | beta4 |
Affected
| ||||||
Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 11.0.0 Search vendor "Electronjs" for product "Electron" and version "11.0.0" | beta5 |
Affected
|