Description
Streambert is a cross-platform Electron Desktop App to stream and download video content. Versions prior to 2.5.0 improperly validate executable paths supplied to the run-download IPC handler, allowing a compromised renderer process to execute arbitrary local binaries with the application’s privileges. Version 2.5.0 contains a patch.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| truelockmc | streambert | < 2.5.0 | — |