Cross site scripting in code-server

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2021-42648 · ADVISORY
• cdr/code-server · WEB
• coder/code-server#4430 · WEB
• coder/code-server · PACKAGE

code-server のその他の脆弱性

• CVE-2023-26114緊急 9.3Versions of the package code-server before 4.10.1 are vulnerable to Missing Origin Validation in WebSockets handshakes. Exploiting this vuln…
• CVE-2021-3810高 7.5code-server is vulnerable to Inefficient Regular Expression Complexity