CVE-2025-1087
Arbitrary Code Execution in Kong Insomnia Desktop Application
概要
Arbitrary Code Execution in Kong Insomnia Desktop Application
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Kong Insomnia Desktop Application before 11.0.2 contains a template injection vulnerability that allows attackers to execute arbitrary code. The vulnerability exists due to insufficient validation of user-supplied input when processing template strings, which can lead to arbitrary JavaScript execution in the context of the application.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web tantosec.com