CVE-2022-40274 Gridea version 0.9.3 allows an external attacker to execute arbitrary code remotely on any client attempting to view a…

Description

Gridea version 0.9.3 allows an external attacker to execute arbitrary code remotely on any client attempting to view a malicious markdown file through Gridea. This is possible because the application has the 'nodeIntegration' option enabled.

Affected products and versions