Skip to main content

Insufficient UI Warning of Dangerous Operations in atom-shell

CVE-2024-29057

  • atom-shell
  • chromium
  • chromiumembeddedframework.runtime
  • electron
  • electron-nightly
  • electron-prebuilt
  • org.webjars.npm:electron
  • org.webjars.npm:electron-prebuilt
Medium
4.3/10

Summary

Microsoft Edge (Chromium-based in versions prior to 123.0.6312.59) is vulnerable to Spoofing Vulnerability.

  • LOW
  • NETWORK
  • LOW
  • UNCHANGED
  • REQUIRED
  • NONE
  • NONE
  • NONE

CWE-357 - Insufficient UI Warning of Dangerous Operations

The user interface provides a warning to a user regarding dangerous or sensitive operations, but the warning is not noticeable enough to warrant attention.

References

Advisory Timeline

  • Published