4 matches found
Remote code execution
Nteract v.0.28.0 was discovered to contain a remote code execution RCE vulnerability via the Markdown link...
CVE-2024-22891
Nteract v.0.28.0 was discovered to contain a remote code execution RCE vulnerability via the Markdown link...
CVE-2024-22891
Nteract v.0.28.0 was discovered to contain a remote code execution RCE vulnerability via the Markdown link...
CVE-2024-22891
CVE-2024-22891 affects Nteract v0.28.0 and is a Remote Code Execution (RCE) via Markdown links. The issue arises from using Electron WebView with nodeIntegration enabled in the Markdown parser, enabling an attacker to achieve RCE by crafting a link or shared file. The CVSS v3.1 impact is high (CV...