CVE-2024-48463

creationtimestamp| type| source ---|---|--- 2024-11-04 22:48:36+00:00| seen| https://t.me/cvedetector/9790 2025-01-16 04:53:40+00:00| seen| https://schleuss.online/users/vulnbot/statuses/113836242921137665 2025-01-16 05:54:59+00:00| seen|...

CVE-2024-48463

Bruno IDE Desktop versions prior to 1.29.1 are vulnerable to a command injection vulnerability (CWE-78) and unvalidated URL handling. The root cause is the use of Electron's shell.openExternal function within the Markdown docs viewer without proper validation of http or https protocols. This allo...

CVE-2024-48463

Bruno before 1.29.1 uses Electron shell.openExternal without validation of http or https for opening windows within the Markdown docs viewer...