CVE-2018-15685: Insecure Default Initialization of Resource

August 23, 2018 (updated October 3, 2019)

GitHub Electron is affected by a WebPreferences vulnerability that can be leveraged to perform remote code execution.

References

electronjs.org/blog/web-preferences-fix
nvd.nist.gov/vuln/detail/CVE-2018-15685
www.exploit-db.com/exploits/45272/

Code Behaviors & Features

Detect and mitigate CVE-2018-15685 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →