← Database

CVE-2022-40274

HIGH CVSS: 7.8 Published: 2022-09-30 Modified: 2026-06-17

Description

Gridea version 0.9.3 allows an external attacker to execute arbitrary code remotely on any client attempting to view a malicious markdown file through Gridea. This is possible because the application has the 'nodeIntegration' option enabled.

Affected Platforms

Gridea GrideaLinux Linux Kernel

Weakness Type

NVD-CWE-noinfo, CWE-94

References