← All advisories

Medium severity6.5NVD Advisory· Published Nov 4, 2024· Updated Jun 17, 2026

CVE-2024-48463

CVE-2024-48463

Description

Bruno before 1.29.1 uses Electron shell.openExternal without validation (of http or https) for opening windows within the Markdown docs viewer.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Usebruno/Bruno2 versions
cpe:2.3:a:usebruno:bruno:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:usebruno:bruno:*:*:*:*:*:*:*:*range: <1.29.1
- (no CPE)range: <1.29.1
Bruno/Brunodescription

Patches

Vulnerability mechanics

References

5

github.com/usebruno/bruno/pull/3122nvdIssue TrackingPatch
seclists.org/fulldisclosure/2025/Jan/6nvdExploitMailing ListThird Party Advisory
gist.github.com/opcod3r/ab69f36d52367df7ffac32a597dff31cnvdExploitThird Party Advisory
github.com/usebruno/bruno/releases/tag/v1.29.1nvdRelease Notes
www.usebruno.com/changelognvdRelease Notes

News mentions

0

No linked articles in our index yet.