Lucene search
+L

2 matches found

attackerkb
attackerkb
•added 2021/11/10 5:15 p.m.•10 views

CVE-2021-41038

In versions of the @theia/plugin-ext component of Eclipse Theia prior to 1.18.0, Webview contents can be hijacked via postMessage...

6.1CVSS6.3AI score0.00737EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/10 12:00 a.m.•2 views

CVE-2021-41038: Improper Verification of Source of a Communication Channel

In versions of the @theia/plugin-ext component of Eclipse Theia prior to 1.18.0, Webview contents can be hijacked via postMessage...

6.1CVSS5.7AI score0.00737EPSS
SaveExploits1References2
Rows per page
Query Builder