Advisories · Technology
electerm.
Every CVE that names electerm among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
electerm before 5.3.15 Arbitrary Command Execution via Unvalidated runGlobalAsync IPC Bridge
- electerm
- CWE-749
- CVSS 8.1 High
electerm's RDP clipboard file download may parse unsafe file name
- electerm
- Path traversal
- CVSS 8.8 High
Electerm WebSocket `upgrade-func` and `fs` handlers allow arbitrary method/function invocation due to missing method-name allowlist
- electerm
- CWE-913
- CVSS 8.1 High
electerm: Path traversal in FTP/SFTP recursive folder download via unsanitized server filename
- electerm
- Path traversal
- CVSS 8.8 High
Electerm check folder size function may get attacked by unsafe folder name
- electerm
- Command injection
- CVSS 8.1 High
electerm: Path traversal in editWithSystemEditor temp file path via unsanitized SFTP filename
- electerm
- Path traversal