CVE-2020-14368

creationtimestamp| type| source ---|---|--- 2020-12-15 00:39:25+00:00| seen| https://t.me/cibsecurity/20781 2024-04-28 18:04:40+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/3125...

CVE-2020-14368

CVE-2020-14368 affects Eclipse Che (versions prior to 7.14.0) when cookie-based authentication is configured, enabling CSRF due to Theia IDE not setting SameSite correctly and enabling a cross-site WebSocket hijack on the /services endpoint. Attack scenario involves MITM and tricking the user int...