Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mvxq-6j8f-hrgw

Опубликовано: 09 мая 2025
Источник: github
Github: Не прошло ревью
CVSS4: 9.3

Описание

Kong Insomnia Desktop Application before 11.0.2 contains a template injection vulnerability that allows attackers to execute arbitrary code. The vulnerability exists due to insufficient validation of user-supplied input when processing template strings, which can lead to arbitrary JavaScript execution in the context of the application.

Kong Insomnia Desktop Application before 11.0.2 contains a template injection vulnerability that allows attackers to execute arbitrary code. The vulnerability exists due to insufficient validation of user-supplied input when processing template strings, which can lead to arbitrary JavaScript execution in the context of the application.

EPSS

Процентиль: 65%
0.005
Низкий

9.3 Critical

CVSS4

Дефекты

CWE-20

Связанные уязвимости

nvd
9 месяцев назад

Kong Insomnia Desktop Application before 11.0.2 contains a template injection vulnerability that allows attackers to execute arbitrary code. The vulnerability exists due to insufficient validation of user-supplied input when processing template strings, which can lead to arbitrary JavaScript execution in the context of the application.

EPSS

Процентиль: 65%
0.005
Низкий

9.3 Critical

CVSS4

Дефекты

CWE-20