This vulnerability in tiddly-gittly TidGi-Desktop up to version 0.13.0 involves code injection via manipulation of the Git Repository Import component's functionality in the file src/services/wiki/wikiWorker/loadWikiTiddlersWithSubWikis.ts. The attack vector is network-based with no privileges or user interaction required. The vulnerability impacts confidentiality, integrity, and availability to a low extent. The exploit has been publicly disclosed, but no official remediation or patch has been identified in the provided data.

Successful exploitation allows remote attackers to inject arbitrary code into the affected application, potentially compromising the system running TidGi-Desktop. The impact includes partial loss of confidentiality, integrity, and availability. However, the overall severity is rated medium (CVSS 6.9). There is no indication of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround is provided in the available data. Users should monitor the vendor's communications for updates and apply any forthcoming patches promptly. Until a fix is available, consider restricting network access to the application to trusted sources if feasible.