Description
EdgeEver Desktop 1.92.0 through 1.112.0 contains a remote code execution vulnerability in the desktop:acp-probe IPC handler, which lacks a sender check and spawns a caller-supplied input.path executable. Attackers with script execution in a renderer, such as via template-preview or drag-preview stored cross-site scripting, can call probeAcpAdapter to launch local executables with the user's privileges.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
tianma-if EdgeEver
Default version status: unaffected
1.92.0 to ≤ 1.112.0affected
pkg:github/tianma-if/edgeeverReferences
- https://github.com/tianma-if/edgeever/issues/532 ↗
- https://github.com/tianma-if/edgeever/issues/546 ↗
- https://github.com/tianma-if/edgeever/commit/6b5027e8b4becbee0c0de7cd1a3d04af78ca87ca ↗
- https://github.com/tianma-if/edgeever/blob/f6ade70423ba366077653dbb8ac43a677933c776/apps/desktop/src/main/acp-host.mjs#L1145 ↗
- https://github.com/tianma-if/edgeever ↗
- https://www.vulncheck.com/advisories/edgeever-desktop-1.92.0-through-1.112.0-local-program-execution-via-acp-ipc ↗