Security Advisory

CVE-2021-28119

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-03-09 22:14:39
Last updated 2024-08-03 21:33:17
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Twinkle Tray (aka twinkle-tray) through 1.13.3 allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which invokes the dangerous openExternal API.