WEB Electron setAsDefaultProtocolClient Command Injection -1 (CVE-2018-1000006)

Rule ID

1134491

Severity

High

Description

A command injection vulnerability has been reported in Electron. The vulnerability is due to application compiled with Electron improperly validating user supplied inputs.

Impact

Remote command execution

Recommendation

Update vendor's patch.

IPS Category

Web threats

IPS Anomaly Group

N/A

IPS Rule Default Action

Deny

References

Keywords

N/A