← Volver a CVEs
CVE-2024-48463
MEDIUM6.5
Descripcion
Bruno before 1.29.1 uses Electron shell.openExternal without validation (of http or https) for opening windows within the Markdown docs viewer.
Detalles CVE
Puntuacion CVSS v3.16.5
SeveridadMEDIUM
Vector CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Vector de ataqueNETWORK
ComplejidadLOW
Privilegios requeridosNONE
Interaccion usuarioREQUIRED
Publicado11/4/2024
Ultima modificacion9/23/2025
Fuentenvd
Avistamientos honeypot0
Productos afectados
usebruno:bruno
Debilidades (CWE)
CWE-601
Referencias
https://github.com/usebruno/bruno/pull/3122(cve@mitre.org)
https://github.com/usebruno/bruno/releases/tag/v1.29.1(cve@mitre.org)
https://www.usebruno.com/changelog(cve@mitre.org)
http://seclists.org/fulldisclosure/2025/Jan/6(af854a3a-2127-422b-91ae-364da2661108)
Correlaciones IOC
Sin correlaciones registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.