CVE-2024-48463

creationtimestamp| type| source ---|---|--- 2024-11-04 22:48:36+00:00| seen| https://t.me/cvedetector/9790 2025-01-16 04:53:40+00:00| seen| https://schleuss.online/users/vulnbot/statuses/113836242921137665 2025-01-16 05:54:59+00:00| seen|...

CVE-2024-48463

Bruno before 1.29.1 uses Electron shell.openExternal without validation of http or https for opening windows within the Markdown docs viewer...

CVE-2024-48463

Bruno IDE Desktop prior to version 1.29.1 exposes a vulnerability where Electron’s shell.openExternal is used to open URLs in the Markdown docs viewer without validating http/https. This can lead to untrusted URL handling and, per the connected reports, potential remote code execution on systems ...