CyberSecBulletin

Gridea vulnerabilities

We track 1 vulnerability in Gridea products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 30, 2022.

1vulnerabilities
0critical
1high
0exploited
7.8average CVSS score

Latest Gridea vulnerabilities

  • 7.8 High severity

    Gridea: Improper Control of Generation of Code

    CVE-2022-40274Gridea

    Gridea version 0.9.3 allows an external attacker to execute arbitrary code remotely on any client attempting to view a malicious markdown file through Gridea. This is possible because the application has the 'nodeIntegration' option enabled.