CVE-2022-40274 in Grideainformación

Resumen

por MITRE • 2022-09-30

Gridea version 0.9.3 allows an external attacker to execute arbitrary code remotely on any client attempting to view a malicious markdown file through Gridea. This is possible because the application has the 'nodeIntegration' option enabled.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Reservar

2022-09-08

Divulgación

2022-09-30

Moderación

aceptado

Artículo

VDB-210055

CPE

listo

EPSS

0.00434

KEV

no

Actividades

muy bajo

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2022-40274
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2022-40274
CVE Detailshttps://www.cvedetails.com/cve/CVE-2022-40274/

◂ AnteriorVisión De ConjuntoPróximo ▸

Want to know what is going to be exploited?

We predict KEV entries!