VYPR
High severity7.8NVD Advisory· Published Sep 30, 2022· Updated Jun 17, 2026

CVE-2022-40274

CVE-2022-40274

Description

Gridea version 0.9.3 allows an external attacker to execute arbitrary code remotely on any client attempting to view a malicious markdown file through Gridea. This is possible because the application has the 'nodeIntegration' option enabled.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.