Lucene search
GoogleOSV:GHSA-CWG9-C9CR-P5FQHistoryApr 13, 2021 - 3:18 p.m.
Improper Neutralization of Input in Theia console
2021-04-1315:18:53
Google
osv.dev
6
0.001 Low
EPSS
Percentile
41.0%
In Eclipse Theia versions up to and including 1.8.0, in the debug console there is no HTML escaping, so arbitrary Javascript code can be injected.
| CPE | Name | Operator | Version |
|---|---|---|---|
| @theia/console | lt | 1.8.1 |
Related
prion
prion
Code injection
2021-03-12 22:15:00
nvd
nvd
CVE-2021-28161
2021-03-12 22:15:15
github
github
Improper Neutralization of Input in Theia console
2021-04-13 15:18:53
osv
osv
CVE-2021-28161
2021-03-12 22:15:15
cvelist
cvelist
CVE-2021-28161
2021-03-12 21:40:14
cve
cve
CVE-2021-28161
2021-03-12 22:15:15