226 matches found
Missing Origin Validation in WebSockets
Overview code-server is an application that allows running VS Code on a remote server. Affected versions of this package are vulnerable to Missing Origin Validation in WebSockets handshakes. Exploiting this vulnerability can allow an adversary in specific scenarios to access data from and connect...
Cross-site Scripting (XSS)
code-server is vulnerable to cross-site scripting. The vulnerability exists because the errorHandler function of errors.ts does not properly escape the err.message property, allowing an attacker to inject and execute malicious javascript...
@web-desktop-environment/development-edition-server (>=0.0.4, <=1.0.2), @web-desktop-environment/pack-dev (>=1.0.1-alpha.1, <=1.0.2) potentially affected by CVE-2021-42648 via code-server (>=3.9.2, <=3.9.3)
code-server NPM version =3.9.2, =0.0.4, =1.0.1-alpha.1, =1.0.2 Source cves: CVE-2021-42648 Source advisory: OSV:GHSA-2GP3-6C9P-JP7W...
GHSA-2GP3-6C9P-JP7W Cross site scripting in code-server
Cross-site scripting XSS vulnerability exists in Coder Code-Server before 3.12.0, allows attackers to execute arbitrary code via crafted URL...
Cross site scripting in code-server
Cross-site scripting XSS vulnerability exists in Coder Code-Server before 3.12.0, allows attackers to execute arbitrary code via crafted URL...
CVE-2021-42648
Cross-site scripting XSS vulnerability exists in Coder Code-Server before 3.12.0, allows attackers to execute arbitrary code via crafted URL...
CVE-2021-42648
Cross-site scripting XSS vulnerability exists in Coder Code-Server before 3.12.0, allows attackers to execute arbitrary code via crafted URL...
CVE-2021-42648
Cross-site scripting XSS vulnerability exists in Coder Code-Server before 3.12.0, allows attackers to execute arbitrary code via crafted URL...
CVE-2021-42648
Coder Code-Server is affected by a Cross-Site Scripting (XSS) vulnerability in versions before 3.12.0, exploitable via crafted URLs. Affected component: code-server frontend handling error messages; root cause: insufficient escaping of user-supplied input in error handling. Impact: arbitrary code...
CVE-2021-42648
Cross-site scripting XSS vulnerability exists in Coder Code-Server before 3.12.0, allows attackers to execute arbitrary code via crafted URL...
Coder Code-Server 跨站脚本漏洞
Coder Code-Server is a U.S. Coder company based on Microsoft's open source Visual Studio Code development products. It is used to build a convenient and unified development environment for developers. A security vulnerability exists in Coder Code-Server versions prior to 3.12.0, which can be...
CVE-2021-42648: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability exists in Coder Code-Server before 3.12.0, allows attackers to execute arbitrary code via crafted URL...
Inefficient Regular Expression Complexity in code-server
code-server is vulnerable to Inefficient Regular Expression Complexity...
GHSA-49X3-8228-3W3M Inefficient Regular Expression Complexity in code-server
code-server is vulnerable to Inefficient Regular Expression Complexity...
@web-desktop-environment/development-edition-server (>=0.0.4, <=1.0.2), @web-desktop-environment/pack-dev (>=1.0.1-alpha.1, <=1.0.2) potentially affected by CVE-2021-3810 via code-server (>=3.9.2, <=3.9.3)
code-server NPM version =3.9.2, =0.0.4, =1.0.1-alpha.1, =1.0.2 Source cves: CVE-2021-3810 Source advisory: OSV:GHSA-49X3-8228-3W3M...
Regular Expression Denial Of Service (ReDoS)
code-server is vulnerable to regular expression denial of service. An attacker is able to send a malicious string which require extensive processing of regex machine, leading to an application crash...
CVE-2021-3810
code-server is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3810
code-server is vulnerable to Inefficient Regular Expression Complexity...