Electronjs Electron 17.0.0 Alpha 3

CPE Details

Electronjs Electron 17.0.0 Alpha 3
electronjs
electron
17.0.0
2021-12-28
16h19 +00:00
2021-12-28
16h21 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:electronjs:electron:17.0.0:alpha3:*:*:*:*:*:*

Informations

Vendor

electronjs

Product

electron

Version

17.0.0

Update

alpha3

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2022-21718 2022-03-22 15h25 +00:00 Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. A vulnerability in versions prior to `17.0.0-alpha.6`, `16.0.6`, `15.3.5`, `14.2.4`, and `13.6.6` allows renderers to obtain access to a bluetooth device via the web bluetooth API if the app has not configured a custom `select-bluetooth-device` event handler. This has been patched and Electron versions `17.0.0-alpha.6`, `16.0.6`, `15.3.5`, `14.2.4`, and `13.6.6` contain the fix. Code from the GitHub Security Advisory can be added to the app to work around the issue.
5
Medium