CVE-2025-1087 in Insomnia Desktop Application
Sumário
de MITRE • 09/05/2025
Kong Insomnia Desktop Application before 11.0.2 contains a template injection vulnerability that allows attackers to execute arbitrary code. The vulnerability exists due to insufficient validation of user-supplied input when processing template strings, which can lead to arbitrary JavaScript execution in the context of the application.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.