Merge pull request #2871 from Meeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee/master

Create  electron-version-detect.yaml
patch-1
Sandeep Singh 2021-10-11 03:54:12 +05:30 committed by GitHub
commit b233293753
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 20 additions and 0 deletions

View File

@ -0,0 +1,20 @@
id: electron-version-detect.yaml
info:
name: Electron Version Detect
author: me9187
severity: info
tags: electron,file
reference:
- https://www.electronjs.org/blog/chromium-rce-vulnerability/
# Check the electron version on snyk.io to see if the bundled chromium version is outdated
# If the chromium version is old you can turn XSS into RCE
file:
- extensions:
- json
extractors:
- type: regex
regex:
- '"electronVersion":"[^"]*"'