CVE-2022-40274

Gridea version 0.9.3 allows an external attacker to execute arbitrary code remotely on any client attempting to view a malicious markdown file through...

Original description

The description as published by the source.

Gridea version 0.9.3 allows an external attacker to execute arbitrary code remotely on any client attempting to view a malicious markdown file through Gridea. This is possible because the application has the 'nodeIntegration' option enabled.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory fluidattacks.com
advisory github.com
advisory nvd.nist.gov
package github.com