Vulnerabilities > CVE-2023-44402 - Unspecified vulnerability in Electronjs Electron

CVSS 7.0 - HIGH

Attack vector

LOCAL

Attack complexity

HIGH

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

high complexity

electronjs

NVD

Published: 2023-12-01

Updated: 2024-11-21

Summary

Electron is an open source framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. This only impacts apps that have the `embeddedAsarIntegrityValidation` and `onlyLoadAppFromAsar` fuses enabled. Apps without these fuses enabled are not impacted. This issue is specific to macOS as these fuses are only currently supported on macOS. Specifically this issue can only be exploited if your app is launched from a filesystem the attacker has write access too. i.e. the ability to edit files inside the `.app` bundle on macOS which these fuses are supposed to protect against. There are no app side workarounds, you must update to a patched version of Electron.

Vulnerable Configurations

Part	Description	Count
Application	Electronjs Electronjs Electron 27.0.0 Electronjs Electron 26.0.0 Electronjs Electron 26.1.0 Electronjs Electron 26.2.0 Electronjs Electron 26.2.1 Electronjs Electron 25.0.0 Electronjs Electron 25.0.1 Electronjs Electron 25.1.0 Electronjs Electron 25.1.1 Electronjs Electron 25.2.0 Electronjs Electron 25.2.1 Electronjs Electron 25.3.0 Electronjs Electron 25.3.1 Electronjs Electron 25.3.2 Electronjs Electron 25.4.0 Electronjs Electron 25.5.0 Electronjs Electron 25.6.0 Electronjs Electron 25.7.0 Electronjs Electron 25.8.0 Electronjs Electron 25.8.1 Electronjs Electron 24.0.0 Electronjs Electron 24.1.0 Electronjs Electron 24.1.1 Electronjs Electron 24.1.2 Electronjs Electron 24.1.3 Electronjs Electron 24.2.0 Electronjs Electron 24.3.0 Electronjs Electron 24.3.1 Electronjs Electron 24.4.0 Electronjs Electron 24.4.1 Electronjs Electron 24.5.0 Electronjs Electron 24.5.1 Electronjs Electron 24.6.0 Electronjs Electron 24.6.1 Electronjs Electron 24.6.2 Electronjs Electron 24.6.3 Electronjs Electron 24.6.4 Electronjs Electron 24.6.5 Electronjs Electron 24.7.0 Electronjs Electron 24.7.1 Electronjs Electron 24.8.0 Electronjs Electron 24.8.1 Electronjs Electron 24.8.2 Electronjs Electron 24.8.3 Electronjs Electron 23.0.0 Electronjs Electron 23.1.0 Electronjs Electron 23.1.1 Electronjs Electron 23.1.2 Electronjs Electron 23.1.3 Electronjs Electron 23.1.4 Electronjs Electron 23.2.0 Electronjs Electron 23.2.1 Electronjs Electron 23.2.2 Electronjs Electron 23.2.3 Electronjs Electron 23.2.4 Electronjs Electron 23.3.0 Electronjs Electron 23.3.1 Electronjs Electron 23.3.2 Electronjs Electron 23.3.3 Electronjs Electron 23.3.4 Electronjs Electron 23.3.5 Electronjs Electron 23.3.6 Electronjs Electron 23.3.7 Electronjs Electron 23.3.8 Electronjs Electron 23.3.9 Electronjs Electron 23.3.10 Electronjs Electron 23.3.11 Electronjs Electron 23.3.12 Electronjs Electron 23.3.13 Electronjs Electron 23.3.14 Electronjs Electron 1.7.8 Electronjs Electron 18.0.2 Electronjs Electron 18.0.3 Electronjs Electron 18.0.4 Electronjs Electron 18.1.0 Electronjs Electron 18.2.0 Electronjs Electron 18.2.2 Electronjs Electron 18.2.3 Electronjs Electron 18.2.4 Electronjs Electron 18.3.0 Electronjs Electron 18.3.1 Electronjs Electron 18.3.2 Electronjs Electron 18.3.3 Electronjs Electron 18.3.4 Electronjs Electron 18.3.5 Electronjs Electron 18.3.6 Electronjs Electron 18.3.7 Electronjs Electron 18.3.8 Electronjs Electron 18.3.9 Electronjs Electron 18.3.11 Electronjs Electron 18.3.12 Electronjs Electron 18.3.13 Electronjs Electron 18.3.14 Electronjs Electron 18.3.15 Electronjs Electron 19.0.0 Electronjs Electron 19.0.1 Electronjs Electron 19.0.2 Electronjs Electron 19.0.3 Electronjs Electron 19.0.4 Electronjs Electron 19.0.5 Electronjs Electron 19.0.6 Electronjs Electron 19.0.7 Electronjs Electron 19.0.8 Electronjs Electron 19.0.9 Electronjs Electron 19.0.10 Electronjs Electron 19.0.11 Electronjs Electron 19.0.12 Electronjs Electron 19.0.13 Electronjs Electron 19.0.14 Electronjs Electron 19.0.15 Electronjs Electron 19.0.16 Electronjs Electron 19.0.17 Electronjs Electron 19.1.0 Electronjs Electron 19.1.1 Electronjs Electron 19.1.2 Electronjs Electron 19.1.3 Electronjs Electron 20.0.0 Electronjs Electron 20.0.1 Electronjs Electron 20.0.2 Electronjs Electron 20.0.3 Electronjs Electron 20.1.0 Electronjs Electron 20.1.1 Electronjs Electron 20.1.2 Electronjs Electron 20.1.3 Electronjs Electron 20.1.4 Electronjs Electron 20.2.0 Electronjs Electron 20.3.0 Electronjs Electron 20.3.1 Electronjs Electron 20.3.2 Electronjs Electron 21.0.0 Electronjs Electron 21.0.1 Electronjs Electron 21.1.0 Electronjs Electron 21.1.1 Electronjs Electron 22.0.0 Electronjs Electron 22.0.1 Electronjs Electron 22.0.2 Electronjs Electron 22.0.3 Electronjs Electron 22.1.0 Electronjs Electron 22.2.0 Electronjs Electron 22.2.1 Electronjs Electron 22.3.0 Electronjs Electron 22.3.1 Electronjs Electron 22.3.2 Electronjs Electron 22.3.3 Electronjs Electron 22.3.4 Electronjs Electron 22.3.5 Electronjs Electron 22.3.6 Electronjs Electron 22.3.7 Electronjs Electron 22.3.8 Electronjs Electron 22.3.9 Electronjs Electron 22.3.10 Electronjs Electron 22.3.11 Electronjs Electron 22.3.12 Electronjs Electron 22.3.13 Electronjs Electron 22.3.14 Electronjs Electron 22.3.15 Electronjs Electron 22.3.16 Electronjs Electron 22.3.17 Electronjs Electron 22.3.18 Electronjs Electron 22.3.21 Electronjs Electron 22.3.22 Electronjs Electron 22.3.23 Electronjs Electron 22.3.24	290

Summary

Vulnerable Configurations

References