CVE-2020-26272

IPC messages misrouted in Electron

Severity Score

6.5

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The Electron framework lets you write cross-platform desktop applications using JavaScript, HTML and CSS. In affected versions of Electron IPC messages sent from the main process to a subframe in the renderer process, through webContents.sendToFrame, event.reply or when using the remote module, can in some cases be delivered to the wrong frame. If your app uses remote, calls webContents.sendToFrame, or calls event.reply in an IPC message handler then it is impacted by this issue. This has been fixed in versions 9.4.0, 10.2.0, 11.1.0, and 12.0.0-beta.9. There are no workarounds for this issue.

El framework Electron le permite escribir aplicaciones de escritorio multiplataforma usando JavaScript, HTML y CSS. En las versiones afectadas de Electron IPC, los mensajes enviados desde el proceso principal a una subtrama en el proceso de renderizado, por medio de webContents.sendToFrame, event.reply o cuando se usa el módulo remoto, en algunos casos pueden enviarse a la trama incorrecta. Si su aplicación usa remoto, llama a webContents.sendToFrame, o llama a event.reply en un manejador de mensajes de IPC, entonces se ve afectado por este problema. Esto se ha corregido en las versiones 9.4.0, 10.2.0, 11.1.0 y 12.0.0-beta.9. No existen soluciones para este problema

*Credits: N/A

CVSS Scores

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

None

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2020-10-01 CVE Reserved
2021-01-28 CVE Published
2024-08-04 CVE Updated
2024-11-17 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-668: Exposure of Resource to Wrong Sphere

CAPEC

References (5)

URL	Tag	Source
https://github.com/electron/electron/pull/26875	Third Party Advisory
https://github.com/electron/electron/releases/tag/v9.4.0	Release Notes
https://github.com/electron/electron/security/advisories/GHSA-hvf8-h2qh-37m9	Third Party Advisory

URL	Date	SRC

URL	Date	SRC
https://github.com/electron/electron/commit/07a1c2a3e5845901f7e2eda9506695be58edc73c	2021-02-04

URL	Date	SRC
https://www.electronjs.org/releases/stable?version=9#9.4.0	2021-02-04

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				>= 9.0.0 < 9.4.0 Search vendor "Electronjs" for product "Electron" and version " >= 9.0.0 < 9.4.0"		-		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				>= 10.0.0 < 10.2.0 Search vendor "Electronjs" for product "Electron" and version " >= 10.0.0 < 10.2.0"		-		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				>= 11.0.0 < 11.1.0 Search vendor "Electronjs" for product "Electron" and version " >= 11.0.0 < 11.1.0"		-		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				9.0.0 Search vendor "Electronjs" for product "Electron" and version "9.0.0"		beta1		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				9.0.0 Search vendor "Electronjs" for product "Electron" and version "9.0.0"		beta10		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				9.0.0 Search vendor "Electronjs" for product "Electron" and version "9.0.0"		beta11		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				9.0.0 Search vendor "Electronjs" for product "Electron" and version "9.0.0"		beta12		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				9.0.0 Search vendor "Electronjs" for product "Electron" and version "9.0.0"		beta13		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				9.0.0 Search vendor "Electronjs" for product "Electron" and version "9.0.0"		beta14		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				9.0.0 Search vendor "Electronjs" for product "Electron" and version "9.0.0"		beta15		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				9.0.0 Search vendor "Electronjs" for product "Electron" and version "9.0.0"		beta16		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				9.0.0 Search vendor "Electronjs" for product "Electron" and version "9.0.0"		beta17		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				9.0.0 Search vendor "Electronjs" for product "Electron" and version "9.0.0"		beta18		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				9.0.0 Search vendor "Electronjs" for product "Electron" and version "9.0.0"		beta19		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				9.0.0 Search vendor "Electronjs" for product "Electron" and version "9.0.0"		beta2		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				9.0.0 Search vendor "Electronjs" for product "Electron" and version "9.0.0"		beta20		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				9.0.0 Search vendor "Electronjs" for product "Electron" and version "9.0.0"		beta21		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				9.0.0 Search vendor "Electronjs" for product "Electron" and version "9.0.0"		beta22		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				9.0.0 Search vendor "Electronjs" for product "Electron" and version "9.0.0"		beta23		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				9.0.0 Search vendor "Electronjs" for product "Electron" and version "9.0.0"		beta24		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				9.0.0 Search vendor "Electronjs" for product "Electron" and version "9.0.0"		beta3		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				9.0.0 Search vendor "Electronjs" for product "Electron" and version "9.0.0"		beta4		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				9.0.0 Search vendor "Electronjs" for product "Electron" and version "9.0.0"		beta5		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				9.0.0 Search vendor "Electronjs" for product "Electron" and version "9.0.0"		beta6		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				9.0.0 Search vendor "Electronjs" for product "Electron" and version "9.0.0"		beta7		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				9.0.0 Search vendor "Electronjs" for product "Electron" and version "9.0.0"		beta8		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				9.0.0 Search vendor "Electronjs" for product "Electron" and version "9.0.0"		beta9		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0"		beta1		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0"		beta10		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0"		beta11		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0"		beta12		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0"		beta13		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0"		beta14		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0"		beta15		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0"		beta17		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0"		beta19		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0"		beta2		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0"		beta20		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0"		beta21		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0"		beta23		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0"		beta24		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0"		beta25		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0"		beta3		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0"		beta4		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0"		beta5		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0"		beta6		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0"		beta7		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0"		beta8		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				10.0.0 Search vendor "Electronjs" for product "Electron" and version "10.0.0"		beta9		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				11.0.0 Search vendor "Electronjs" for product "Electron" and version "11.0.0"		beta1		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				11.0.0 Search vendor "Electronjs" for product "Electron" and version "11.0.0"		beta10		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				11.0.0 Search vendor "Electronjs" for product "Electron" and version "11.0.0"		beta11		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				11.0.0 Search vendor "Electronjs" for product "Electron" and version "11.0.0"		beta12		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				11.0.0 Search vendor "Electronjs" for product "Electron" and version "11.0.0"		beta13		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				11.0.0 Search vendor "Electronjs" for product "Electron" and version "11.0.0"		beta14		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				11.0.0 Search vendor "Electronjs" for product "Electron" and version "11.0.0"		beta15		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				11.0.0 Search vendor "Electronjs" for product "Electron" and version "11.0.0"		beta16		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				11.0.0 Search vendor "Electronjs" for product "Electron" and version "11.0.0"		beta17		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				11.0.0 Search vendor "Electronjs" for product "Electron" and version "11.0.0"		beta18		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				11.0.0 Search vendor "Electronjs" for product "Electron" and version "11.0.0"		beta19		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				11.0.0 Search vendor "Electronjs" for product "Electron" and version "11.0.0"		beta20		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				11.0.0 Search vendor "Electronjs" for product "Electron" and version "11.0.0"		beta21		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				11.0.0 Search vendor "Electronjs" for product "Electron" and version "11.0.0"		beta22		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				11.0.0 Search vendor "Electronjs" for product "Electron" and version "11.0.0"		beta23		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				11.0.0 Search vendor "Electronjs" for product "Electron" and version "11.0.0"		beta3		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				11.0.0 Search vendor "Electronjs" for product "Electron" and version "11.0.0"		beta4		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				11.0.0 Search vendor "Electronjs" for product "Electron" and version "11.0.0"		beta5		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				11.0.0 Search vendor "Electronjs" for product "Electron" and version "11.0.0"		beta6		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				11.0.0 Search vendor "Electronjs" for product "Electron" and version "11.0.0"		beta7		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				11.0.0 Search vendor "Electronjs" for product "Electron" and version "11.0.0"		beta8		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				11.0.0 Search vendor "Electronjs" for product "Electron" and version "11.0.0"		beta9		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				12.0.0 Search vendor "Electronjs" for product "Electron" and version "12.0.0"		beta1		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				12.0.0 Search vendor "Electronjs" for product "Electron" and version "12.0.0"		beta3		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				12.0.0 Search vendor "Electronjs" for product "Electron" and version "12.0.0"		beta4		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				12.0.0 Search vendor "Electronjs" for product "Electron" and version "12.0.0"		beta5		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				12.0.0 Search vendor "Electronjs" for product "Electron" and version "12.0.0"		beta6		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				12.0.0 Search vendor "Electronjs" for product "Electron" and version "12.0.0"		beta7		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				12.0.0 Search vendor "Electronjs" for product "Electron" and version "12.0.0"		beta8		Affected
Electronjs Search vendor "Electronjs"		Electron Search vendor "Electronjs" for product "Electron"				12.0.0 Search vendor "Electronjs" for product "Electron" and version "12.0.0"		beta9		Affected