CVE-2016-1202 High severity vulnerability that affects electron
HighCVSS 7.8
EPSS 0.43%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Untrusted search path vulnerability in Atom Electron before 0.33.5 allows local users to gain privileges via a Trojan horse Node.js module in a parent directory of a directory named on a require line.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| npm electron(npm) | < 0.33.5 | 0.33.5 |
| atom electron | <= 0.33.4 | No fix listed |
References
- nvd.nist.gov third-party-advisory
- github.com patch
- github.com patch
- github.com
- JVN#00324715 third-party-advisory vendor-advisory
- JVNDB-2016-000054 third-party-advisory vendor-advisory