CVE-2025-1087 in Insomnia Desktop Application정보

요약

\~에 의해 MITRE • 2025. 05. 09.

Kong Insomnia Desktop Application before 11.0.2 contains a template injection vulnerability that allows attackers to execute arbitrary code. The vulnerability exists due to insufficient validation of user-supplied input when processing template strings, which can lead to arbitrary JavaScript execution in the context of the application.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

책임이 있는

Kong

예약하다

2025. 02. 06.

공개

2025. 05. 09.

모더레이션

수락

항목

VDB-308196

CPE

준비됨

CWE

CWE-79 (확인됨)

CVSS

4.3 (VulDB)

EPSS

0.01080

KEV

아니요

활동

매우 낮음

출처

MITRE	https://www.cve.org/CVERecord?id=CVE-2025-1087
NVD	https://nvd.nist.gov/vuln/detail/CVE-2025-1087
CVE Details	https://www.cvedetails.com/cve/CVE-2025-1087/

◂ 이전 개요 다음 ▸

Interested in the pricing of exploits?

See the underground prices here!