CVE-2021-39184
Sandboxed renderers can obtain thumbnails of arbitrary files through the nativeImage API
Severity Score
8.6
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. A vulnerability in versions prior to 11.5.0, 12.1.0, and 13.3.0 allows a sandboxed renderer to request a "thumbnail" image of an arbitrary file on the user's system. The thumbnail can potentially include significant parts of the original file, including textual data in many cases. Versions 15.0.0-alpha.10, 14.0.0, 13.3.0, 12.1.0, and 11.5.0 all contain a fix for the vulnerability. Two workarounds aside from upgrading are available. One may make the vulnerability significantly more difficult for an attacker to exploit by enabling `contextIsolation` in one's app. One may also disable the functionality of the `createThumbnailFromPath` API if one does not need it.
Electron es un framework para escribir aplicaciones de escritorio multiplataforma usando JavaScript, HTML y CSS. Una vulnerabilidad en las versiones anteriores a 11.5.0, 12.1.0 y 13.3.0, permite que un renderizador en sandbox requiera una imagen "thumbnail" de un archivo arbitrario en el sistema del usuario. La miniatura puede incluir potencialmente partes significativas del archivo original, incluyendo datos textuales en muchos casos. Las versiones 15.0.0-alpha.10, 14.0.0, 13.3.0, 12.1.0 y 11.5.0, contienen una corrección de la vulnerabilidad. Se presentan dos soluciones disponibles aparte de la actualización. Uno puede hacer que la vulnerabilidad sea significativamente más difícil de explotar para un atacante al habilitar "contextIsolation" en la propia aplicación. También es posible deshabilitar la funcionalidad de la API "createThumbnailFromPath" si no es necesaria
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2021-08-16 CVE Reserved
- 2021-10-12 CVE Published
- 2024-06-27 EPSS Updated
- 2024-08-04 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-668: Exposure of Resource to Wrong Sphere
- CWE-862: Missing Authorization
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| https://github.com/electron/electron/pull/30728 | Third Party Advisory | |
| https://github.com/electron/electron/security/advisories/GHSA-mpjm-v997-c4h4 | Mitigation |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | >= 10.1.0 < 11.5.0 Search vendor "Electronjs" for product "Electron" and version " >= 10.1.0 < 11.5.0" | - |
Affected
| ||||||
| Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | >= 12.0.0 < 12.1.0 Search vendor "Electronjs" for product "Electron" and version " >= 12.0.0 < 12.1.0" | - |
Affected
| ||||||
| Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | >= 13.0.0 < 13.3.0 Search vendor "Electronjs" for product "Electron" and version " >= 13.0.0 < 13.3.0" | - |
Affected
| ||||||
| Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 14.0.0 Search vendor "Electronjs" for product "Electron" and version "14.0.0" | beta1 |
Affected
| ||||||
| Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 14.0.0 Search vendor "Electronjs" for product "Electron" and version "14.0.0" | beta10 |
Affected
| ||||||
| Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 14.0.0 Search vendor "Electronjs" for product "Electron" and version "14.0.0" | beta11 |
Affected
| ||||||
| Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 14.0.0 Search vendor "Electronjs" for product "Electron" and version "14.0.0" | beta12 |
Affected
| ||||||
| Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 14.0.0 Search vendor "Electronjs" for product "Electron" and version "14.0.0" | beta13 |
Affected
| ||||||
| Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 14.0.0 Search vendor "Electronjs" for product "Electron" and version "14.0.0" | beta14 |
Affected
| ||||||
| Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 14.0.0 Search vendor "Electronjs" for product "Electron" and version "14.0.0" | beta15 |
Affected
| ||||||
| Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 14.0.0 Search vendor "Electronjs" for product "Electron" and version "14.0.0" | beta16 |
Affected
| ||||||
| Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 14.0.0 Search vendor "Electronjs" for product "Electron" and version "14.0.0" | beta17 |
Affected
| ||||||
| Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 14.0.0 Search vendor "Electronjs" for product "Electron" and version "14.0.0" | beta18 |
Affected
| ||||||
| Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 14.0.0 Search vendor "Electronjs" for product "Electron" and version "14.0.0" | beta19 |
Affected
| ||||||
| Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 14.0.0 Search vendor "Electronjs" for product "Electron" and version "14.0.0" | beta2 |
Affected
| ||||||
| Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 14.0.0 Search vendor "Electronjs" for product "Electron" and version "14.0.0" | beta20 |
Affected
| ||||||
| Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 14.0.0 Search vendor "Electronjs" for product "Electron" and version "14.0.0" | beta21 |
Affected
| ||||||
| Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 14.0.0 Search vendor "Electronjs" for product "Electron" and version "14.0.0" | beta22 |
Affected
| ||||||
| Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 14.0.0 Search vendor "Electronjs" for product "Electron" and version "14.0.0" | beta23 |
Affected
| ||||||
| Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 14.0.0 Search vendor "Electronjs" for product "Electron" and version "14.0.0" | beta24 |
Affected
| ||||||
| Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 14.0.0 Search vendor "Electronjs" for product "Electron" and version "14.0.0" | beta25 |
Affected
| ||||||
| Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 14.0.0 Search vendor "Electronjs" for product "Electron" and version "14.0.0" | beta3 |
Affected
| ||||||
| Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 14.0.0 Search vendor "Electronjs" for product "Electron" and version "14.0.0" | beta4 |
Affected
| ||||||
| Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 14.0.0 Search vendor "Electronjs" for product "Electron" and version "14.0.0" | beta5 |
Affected
| ||||||
| Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 14.0.0 Search vendor "Electronjs" for product "Electron" and version "14.0.0" | beta6 |
Affected
| ||||||
| Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 14.0.0 Search vendor "Electronjs" for product "Electron" and version "14.0.0" | beta7 |
Affected
| ||||||
| Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 14.0.0 Search vendor "Electronjs" for product "Electron" and version "14.0.0" | beta8 |
Affected
| ||||||
| Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 14.0.0 Search vendor "Electronjs" for product "Electron" and version "14.0.0" | beta9 |
Affected
| ||||||
| Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 15.0.0 Search vendor "Electronjs" for product "Electron" and version "15.0.0" | alpha1 |
Affected
| ||||||
| Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 15.0.0 Search vendor "Electronjs" for product "Electron" and version "15.0.0" | alpha2 |
Affected
| ||||||
| Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 15.0.0 Search vendor "Electronjs" for product "Electron" and version "15.0.0" | alpha3 |
Affected
| ||||||
| Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 15.0.0 Search vendor "Electronjs" for product "Electron" and version "15.0.0" | alpha4 |
Affected
| ||||||
| Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 15.0.0 Search vendor "Electronjs" for product "Electron" and version "15.0.0" | alpha5 |
Affected
| ||||||
| Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 15.0.0 Search vendor "Electronjs" for product "Electron" and version "15.0.0" | alpha6 |
Affected
| ||||||
| Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 15.0.0 Search vendor "Electronjs" for product "Electron" and version "15.0.0" | alpha7 |
Affected
| ||||||
| Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 15.0.0 Search vendor "Electronjs" for product "Electron" and version "15.0.0" | alpha8 |
Affected
| ||||||
| Electronjs Search vendor "Electronjs" | Electron Search vendor "Electronjs" for product "Electron" | 15.0.0 Search vendor "Electronjs" for product "Electron" and version "15.0.0" | alpha9 |
Affected
| ||||||