CVE-2022-40274

CVE-2022-40274 describes a remote code execution vulnerability in Gridea version 0.9.3, affecting Gridea applications across various operating systems including Linux. This flaw allows an unauthenticated attacker to execute arbitrary code on a client's system simply by having them view a specially crafted malicious markdown file. The vulnerability stems from the application's enabled 'nodeIntegration' option, which significantly lowers security boundaries. With a CVSS score of 7.8 (High), successful exploitation could lead to full compromise of the affected system, though it requires user interaction. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.