CVE-2021-28134

2021-03-1100:15:12

Google

osv.dev

7.1 High

AI Score

Confidence

Low

0.036 Low

EPSS

Percentile

91.6%

JSON

Clipper before 1.0.5 allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which invokes the dangerous openExternal API.

CPENameOperatorVersion
clippereq1.0.1
clippereq1.0.4
clippereq1.0.2
clippereq1.0.0
clippereq1.0.3

Name	Operator	Version
clipper	eq	1.0.1
clipper	eq	1.0.4
clipper	eq	1.0.2
clipper	eq	1.0.0
clipper	eq	1.0.3

References

github.com/AkashRajpurohit/clipper/issues/13

github.com/AkashRajpurohit/clipper/pull/14

github.com/AkashRajpurohit/clipper/pull/14/commits/28f1492a12234cf1e6af85c78bf22ee2f5090d19

github.com/AkashRajpurohit/clipper/releases/tag/v1.0.5