Inefficient Regular Expression Complexity in code-server

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2021-3810 · ADVISORY
• cdr/code-server commit ca617df · WEB
• cdr/code-server · PACKAGE
• huntr.dev/bounties/38888513-30fc-4d8f-805d-34070d60e223 · WEB

code-server のその他の脆弱性

• CVE-2023-26114緊急 9.3Versions of the package code-server before 4.10.1 are vulnerable to Missing Origin Validation in WebSockets handshakes. Exploiting this vuln…
• CVE-2021-42648中 6.1Cross-site scripting (XSS) vulnerability exists in Coder Code-Server before 3.12.0, allows attackers to execute arbitrary code via crafted U…