CVE-2022-40274
Assigner: Fluid Attacks
Published: 2022-09-30T16:18:57
State: PUBLISHED
affected: product: Gridea
vendor: n/a
versions: status: affected
version: 0.9.3
descriptions: value: Gridea version 0.9.3 allows an external attacker to execute arbitrary code remotely on any client attempting to view a malicious markdown file through Gridea. This is possible because the application has the 'nodeIntegration' option enabled.
problemTypes: descriptions: description: Remote command execution (RCE)
type: text