CVE-2021-28134 | BDVDB-2026-150381 Detail

Description#

Clipper before 1.0.5 allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which invokes the dangerous openExternal API.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/AkashRajpurohit/clipper/issues/13
https://github.com/AkashRajpurohit/clipper/releases/tag/v1.0.5
https://github.com/AkashRajpurohit/clipper/pull/14
https://github.com/AkashRajpurohit/clipper/pull/14/commits/28f1492a12234cf1e6af85c78bf22ee2f5090d19

Exploit#

No public exploit known

History#

Version 12021-03-11Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.