CWE-154

Improper Neutralization of Variable Name Delimiters

1 CVEs Avg CVSS 7.5 MITRE

CRITICAL

HIGH

MEDIUM

LOW

POC

KEV

Monthly

CVE-2024-39698 Jul 09, 18:15 npm HIGH POC PATCH This Week

electron-updater allows for automatic updates for Electron apps. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required. Public exploit code available.

XSS Microsoft Electron Electron Builder

NVD GitHub

CVSS 3.1

7.5

EPSS

0.3%

CVE-2024-39698 npm

EPSS 0% CVSS 7.5

HIGH POC PATCH This Week

electron-updater allows for automatic updates for Electron apps. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required. Public exploit code available.

XSS Microsoft Electron +1

NVD GitHub