Gridea version 0.9.3 allows an external attacker to execute arbitrary code remotely on any client attempting to view a malicious markdown file through Gridea. This is possible because the application has the 'nodeIntegration' option enabled.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: Fluid Attacks
Published: 2022-09-30T16:18:57
Updated: 2024-08-03T12:14:40.076Z
Reserved: 2022-09-08T00:00:00
Link: CVE-2022-40274
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2022-09-30T17:15:13.217
Modified: 2022-10-04T18:23:03.957
Link: CVE-2022-40274
Redhat
No data.