diff --git a/file/electron/electron-version-detect.yaml b/file/electron/electron-version-detect.yaml new file mode 100644 index 0000000000..1e72b8e93e --- /dev/null +++ b/file/electron/electron-version-detect.yaml @@ -0,0 +1,20 @@ +id: electron-version-detect.yaml + +info: + name: Electron Version Detect + author: me9187 + severity: info + tags: electron,file + reference: + - https://www.electronjs.org/blog/chromium-rce-vulnerability/ + # Check the electron version on snyk.io to see if the bundled chromium version is outdated + # If the chromium version is old you can turn XSS into RCE + +file: + - extensions: + - json + + extractors: + - type: regex + regex: + - '"electronVersion":"[^"]*"'