GHSA-6h98-cf9g-vmg2MediumCVSS 4.3

Electron vulnerable to URL spoofing via PDFium

Published
May 13, 2022
Last Modified
September 13, 2023

🔗 CVE IDs covered (1)

CVE-2017-1000424 →

📋 Description

Electron version 1.7.0 - 1.7.5 is vulnerable to a URL Spoofing problem when opening PDFs in PDFium resulting loading arbitrary PDFs that a hacker can control.

🎯 Affected products1

  • npm/Electron:>= 1.7.0, < 1.7.6

🔗 References (5)