CVE-2024-48463

creationtimestamp| type| source ---|---|--- 2024-11-04 22:48:36+00:00| seen| https://t.me/cvedetector/9790 2025-01-16 04:53:40+00:00| seen| https://schleuss.online/users/vulnbot/statuses/113836242921137665 2025-01-16 05:54:59+00:00| seen|...

CVE-2024-48463

The Bruno IDE Desktop (prior to version 1.29.1 ) is vulnerable to a command injection (CWE-78) flaw within the shell.openExternal function. The root cause is a lack of validation for http or https protocols when opening windows in the Markdown docs viewer . Attackers can exploit this by supplying...

CVE-2024-48463

Bruno before 1.29.1 uses Electron shell.openExternal without validation of http or https for opening windows within the Markdown docs viewer...