Lucene search
GoogleOSV:CVE-2021-41038HistoryNov 10, 2021 - 5:15 p.m.
CVE-2021-41038
2021-11-1017:15:11
Google
osv.dev
8
eclipse theia
postmessage hijack
software vulnerability
In versions of the @theia/plugin-ext component of Eclipse Theia prior to 1.18.0, Webview contents can be hijacked via postMessage().
Related
cvelist
cvelist
CVE-2021-41038
2021-11-10 17:05:11
prion
prion
Code injection
2021-11-10 17:15:00
osv
osv
Improper Verification of Communication Channel in @theia/plugin-ext
2021-11-15 17:40:51
veracode
veracode
Cross-site Scripting (XSS)
2021-09-13 08:55:02
cve
cve
CVE-2021-41038
2021-11-10 17:15:11
github
github
Improper Verification of Communication Channel in @theia/plugin-ext
2021-11-15 17:40:51
nvd
nvd
CVE-2021-41038
2021-11-10 17:15:11