CVE-2024-48463

MEDIUM

Bruno < 1.29.1 - Open Redirect via Markdown Docs Viewer

Title source: llm

Bruno before 1.29.1 uses Electron shell.openExternal without validation (of http or https) for opening windows within the Markdown docs viewer.

Core 5

Core References

Exploit, Third Party Advisory

Issue Tracking, Patch

Release Notes

Release Notes

Exploit, Mailing List, Third Party Advisory

CVSS v3 6.5

EPSS 0.0062

EPSS Percentile 45.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

CWE

CWE-601

Status published

Products (1)

usebruno/bruno < 1.29.1

Published Nov 04, 2024

Tracked Since Feb 18, 2026