Lucene search
GoogleOSV:CVE-2023-26114HistoryMar 23, 2023 - 5:15 a.m.
CVE-2023-26114
2023-03-2305:15:16
Google
osv.dev
4
cve-2023-26114
package code-server
missing origin validation
websockets handshakes
data access
software vulnerability
Versions of the package code-server before 4.10.1 are vulnerable to Missing Origin Validation in WebSockets handshakes. Exploiting this vulnerability can allow an adversary in specific scenarios to access data from and connect to the code-server instance.
Related
veracode
veracode
Improper Validation
2023-03-24 08:53:03
cvelist
cvelist
CVE-2023-26114
2023-03-23 05:00:01
osv
osv
code-server vulnerable to Missing Origin Validation in WebSockets
2023-03-23 06:30:15
prion
prion
Input validation
2023-03-23 05:15:00
cve
cve
CVE-2023-26114
2023-03-23 05:15:16
nvd
nvd
CVE-2023-26114
2023-03-23 05:15:16
github
github
code-server vulnerable to Missing Origin Validation in WebSockets
2023-03-23 06:30:15