CVE-2024-48463

Bruno before 1.29.1 uses Electron shell.openExternal without validation of http or https for opening windows within the Markdown docs viewer...

CVE-2024-48463

The Bruno IDE Desktop (prior to version 1.29.1 ) is vulnerable to a command injection (CWE-78) flaw within the shell.openExternal function. The root cause is a lack of validation for http or https protocols when opening windows in the Markdown docs viewer . Attackers can exploit this by supplying...

CVE-2024-48463

Bruno before 1.29.1 uses Electron shell.openExternal without validation of http or https for opening windows within the Markdown docs viewer...

CVE-2024-48463: URL Redirection to Untrusted Site

Bruno before 1.29.1 uses Electron shell.openExternal without validation of http or https for opening windows within the Markdown docs viewer...