writeups.xyz / Remote Code Execution in Tutanota Desktop due to Code Flaw

Submitter : c2a

Date: 20 September 2023

Bounty : undisclosed

Vulnerabilities :

• XSS
• CSP Bypass
• Parsing Issue
• Electron
• RCE
• Security Code Review

Programs :

• Tutanota

Authors :

• Paul Gerste

Link :
https://www.sonarsource.com/blog/remote-code-execution-in-tutanota-desktop-due-to-code-flaw/