writeups.xyz / Reply to calc: The Attack Chain to Compromise Mailspring

Submitter : c2a

Date: 11 March 2024

Bounty : undisclosed

Vulnerabilities :

• Mutation XSS
• RCE
• Electron
• CSS Exfiltration

Programs :

• Mailspring

Authors :

• Yaniv Nizry (@YNizry)

Link :
https://www.sonarsource.com/blog/reply-to-calc-the-attack-chain-to-compromise-mailspring/