CVE-2018-1000118

Github Electron version Electron 1.8.2-beta.4 and earlier contains a Command Injection vulnerability in Protocol Handler that can result in command execute. This attack appear to be exploitable via the victim opening an electron protocol handler in their browser. This vulnerability appears to have been fixed in Electron 1.8.2-beta.5. This issue is due to an incomplete fix for CVE-2018-1000006, specifically the black list used was not case insensitive allowing an attacker to potentially bypass it.

• CWE-78

• https://electronjs.org/releases#1.8.2-beta.5Third Party Advisory
• https://github.com/electron/electron/commit/ce361a12e355f9e1e99c989f1ea056c9e502dbe7Patch, Third Party Advisory
• https://electronjs.org/releases#1.8.2-beta.5Third Party Advisory
• https://github.com/electron/electron/commit/ce361a12e355f9e1e99c989f1ea056c9e502dbe7Patch, Third Party Advisory

Published

Mar 7, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1000112An improper authorization vulnerability exists in Jenkins Me…
• CVE-2018-1000113A cross-site scripting vulnerability exists in Jenkins TestL…
• CVE-2018-1000114An improper authorization vulnerability exists in Jenkins Pr…
• CVE-2018-1000115Memcached version 1.5.5 contains an Insufficient Control of …
• CVE-2018-1000116NET-SNMP version 5.7.2 contains a heap corruption vulnerabil…
• CVE-2018-1000117Python Software Foundation CPython version From 3.2 until 3.…6.7
• CVE-2018-1000119Sinatra rack-protection versions 1.5.4 and 2.0.0.rc3 and ear…
• CVE-2018-1000120A buffer overflow exists in curl 7.12.3 to and including cur…
• CVE-2018-1000121A NULL pointer dereference exists in curl 7.21.0 to and incl…
• CVE-2018-1000122A buffer over-read exists in curl 7.20.0 to and including cu…
• CVE-2018-1000123Ionic Team Cordova plugin iOS Keychain version before commit…
• CVE-2018-1000124I Librarian I-librarian version 4.8 and earlier contains a X…10