CVE-2023-23623

Description

Electron's Content-Secrity-Policy disabling eval not applied consistently in renderers with sandbox disabled

Predictions

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

References

• https://github.com/electron/electron/security/advisories/GHSA-gxh7-wv9q-fwfr
• https://nvd.nist.gov/vuln/detail/CVE-2023-23623
• https://github.com/electron/electron/pull/36667
• https://github.com/electron/electron/pull/36668
• https://github.com/electron/electron/commit/9e7fbc7021d8d716c43782249a552e55289c35db
• https://github.com/electron/electron
• https://github.com/electron/electron/releases/tag/v22.0.1