CyberRota Analysis
AI-GeneratedElecterm versions prior to 3.15.120 are vulnerable to a high-severity issue that allows a malicious RDP server to manipulate the clipboard download path, potentially leading to unauthorized file writes outside the designated save directory. This vulnerability poses a significant risk to users who rely on Electerm for remote desktop connections, as it could enable attackers to execute arbitrary file operations on the client system. Organizations utilizing Electerm should prioritize upgrading to version 3.15.120 or later to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious RDP server to write attacker-controlled content outside the selected save directory because the RDP clipboard download path in src/client/components/rdp/file-transfer.js passes the server-controlled CLIPRDR filename fileInfo.name to osResolve without sanitization. This issue is fixed in version 3.15.120.