Security Advisory

CVE-2022-40274

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-09-30 16:18:57

Last updated 2025-05-20 18:33:59

Assigner Fluid Attacks

CVSS score not scored

State PUBLISHED

Description

Gridea version 0.9.3 allows an external attacker to execute arbitrary code remotely on any client attempting to view a malicious markdown file through Gridea. This is possible because the application has the 'nodeIntegration' option enabled.

← Browse all CVEs View on cve.org ↗