medium6.5
CVE-2024-48463
Bruno before 1.29.1 uses Electron shell.openExternal without validation (of http or https) for opening windows within the Markdown docs viewer.
Impact
Bruno before 1.29.1 uses Electron shell.openExternal without validation (of http or https) for opening windows within the Markdown docs viewer.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Usebruno | Bruno | before 1.29.1 |