critical9.8
CVE-2021-28134
Clipper before 1.0.5 allows remote command execution.
Impact
Clipper before 1.0.5 allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which invokes the dangerous openExternal API.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Clipper Project | Clipper | before 1.0.5 |
References
- NVD record
- CVE.org record
- https://github.com/AkashRajpurohit/clipper/issues/13
- https://github.com/AkashRajpurohit/clipper/pull/14
- https://github.com/AkashRajpurohit/clipper/pull/14/commits/28f1492a12234cf1e6af85c78bf22ee2f5090d19
- https://github.com/AkashRajpurohit/clipper/releases/tag/v1.0.5
- https://github.com/AkashRajpurohit/clipper/issues/13
- https://github.com/AkashRajpurohit/clipper/pull/14
- https://github.com/AkashRajpurohit/clipper/pull/14/commits/28f1492a12234cf1e6af85c78bf22ee2f5090d19
- https://github.com/AkashRajpurohit/clipper/releases/tag/v1.0.5