Untrusted Search Path Affecting app-builder-lib package, versions <24.13.2


Severity

Recommended
0.0
high
0
10

CVSS assessment made by Snyk's Security Team. Learn more

Threat Intelligence

Exploit Maturity
Proof of concept
EPSS
0.05% (18th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-JS-APPBUILDERLIB-6371201
  • published5 Mar 2024
  • disclosed4 Mar 2024
  • creditBruno Badaró

Introduced: 4 Mar 2024

CVE-2024-27303  (opens in a new tab)
CWE-426  (opens in a new tab)

How to fix?

Upgrade app-builder-lib to version 24.13.2 or higher.

Overview

app-builder-lib is an electron-builder lib

Affected versions of this package are vulnerable to Untrusted Search Path due to the NSIS installer making a system call to open cmd.exe via NSExec in the .nsh installer script. An attacker can place a malicious executable file named cmd.exe in the same folder as the installer, the installer will run the malicious file.

Notes:

  1. This is only exploitable on Windows machines.

  2. NSExec by default searches the current directory of where the installer is located before searching PATH.

CVSS Scores

version 3.1