CVE-2016-1202: High severity vulnerability that affects electron

October 24, 2017 (updated September 13, 2021)

Untrusted search path vulnerability in Atom Electron before 0.33.5 allows local users to gain privileges via a Trojan horse Node.js module in a parent directory of a directory named on a require line.

References

jvn.jp/en/jp/JVN00324715/index.html
jvndb.jvn.jp/jvndb/JVNDB-2016-000054
github.com/advisories/GHSA-gvcj-pfq2-wxj7
github.com/electron/electron/commit/9a2e2b365d061ec10cd861391fd5b1344af7194d
github.com/electron/electron/pull/2976
nvd.nist.gov/vuln/detail/CVE-2016-1202

Code Behaviors & Features

Detect and mitigate CVE-2016-1202 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →