Nteract v.0.28.0 was discovered to contain a remote code execution (RCE) vulnerability via the Markdown link.
The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.
Link | Tags |
---|---|
https://github.com/EQSTLab/PoC/tree/main/2024/RCE/CVE-2024-22891 | third party advisory exploit |