description: Gridea version 0.9.3 allows an external attacker to execute arbitrary code remotely on any client attempting to view a malicious markdown file through Gridea. This is possible because the application has the 'nodeIntegration' option enabled.
problem types: Remote command execution (RCE)
affected:
{
product: Gridea
vendor: n/a
versions:
status: affected, version: 0.9.3
}