high7.8Public exploit code
CVE-2023-31873
Gin 0.7.4 allows execution of arbitrary code when a crafted file is opened, e.g., via require('child_process').
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Gin Markdown Editor v0.7.4 (Electron) - Arbitrary Code Execution2023-05-23 · local · multiple
Impact
Gin 0.7.4 allows execution of arbitrary code when a crafted file is opened, e.g., via require('child_process').
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gin Project | Gin | Version 0.7.4 |