CVE-2021-28134

CRITICO 9.8CVE-2021-28134 · Published 11/03/2021 · updated 17/06/2026

In breve

CVE-2021-28134 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda clipper (clipper project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 5.2%, superiore al 92.5% delle vulnerabilità.
Correzione: aggiornare a 1.0.5 o successiva.

Package	Affected versions	Patched versions
clipper clipper_project	`< 1.0.5`	`1.0.5`

Description

Clipper before 1.0.5 allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which invokes the dangerous openExternal API.

References

AkashRajpurohit/clipper · Exploit
AkashRajpurohit/clipper#14 · Patch
AkashRajpurohit/clipper#14 · Patch
AkashRajpurohit/clipper release v1.0.5 · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free