CVE-2020-12079
Critical
Description
Beaker before 0.8.9 allows a sandbox escape, enabling system access and code execution. This occurs because Electron context isolation is not used, and therefore an attacker can conduct a prototype-pollution attack against the Electron internal messaging API.
SeverityCritical
CVSS10.0
Exploit probability—
ProductBeaker
PublishedApr 23, 2020
First seenApr 23, 2020
How to fix
Update
- beakerbrowser beaker0.8.9 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| beakerbrowser beaker | v < 0.8.9 | 0.8.9 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.