662 matches found
Design/Logic Flaw
In Eclipse Theia versions up to and including 0.16.0, in the notification messages there is no HTML escaping, so Javascript code can run...
CVE-2021-28162
In Eclipse Theia versions up to and including 0.16.0, in the notification messages there is no HTML escaping, so Javascript code can run...
CVE-2021-28162
The vulnerability CVE-2021-28162 affects Eclipse Theia
CVE-2021-28162
In Eclipse Theia versions up to and including 0.16.0, in the notification messages there is no HTML escaping, so Javascript code can run...
CVE-2021-28161
In Eclipse Theia versions up to and including 1.8.0, in the debug console there is no HTML escaping, so arbitrary Javascript code can be injected...
CVE-2021-28161
The CVE-2021-28161 entry concerns Eclipse Theia prior to or including version 1.8.0, where the debug console does not escape HTML. This lack of escaping enables injection of arbitrary JavaScript code through the console, constituting a cross-site scripting risk. The vulnerability is tied to Theia...
PT-2021-17784
Name of the Vulnerable Software and Affected Versions: Eclipse Theia versions up to and including 0.16.0 Description: The issue concerns the lack of HTML escaping in notification messages, allowing Javascript code to run. Recommendations: For Eclipse Theia versions up to and including 0.16.0,...
PT-2021-17783
Name of the Vulnerable Software and Affected Versions: Eclipse Theia versions up to and including 1.8.0 Description: The issue concerns the lack of HTML escaping in the debug console, allowing arbitrary Javascript code to be injected. Recommendations: For Eclipse Theia versions up to and includin...
Eclipse Theia 跨站脚本漏洞
Eclipse Theia is the Eclipse Foundation's set of Visual Studio Code-based open source integrated development environment for desktop and Web applications framework. A cross-site scripting vulnerability exists in Eclipse Theia 1.8.0 and prior versions, which stems from the absence of HTML escaping...
Eclipse Theia 注入漏洞
Eclipse Theia is the Eclipse Foundation's set of Visual Studio Code-based open source integrated development environment for desktop and Web applications framework. An injection vulnerability exists in Eclipse Theia 0.16.0 and earlier versions, which stems from the absence of HTML escaping in...
CVE-2021-3346
Foris before 101.1.1, as used in Turris OS, lacks certain HTML escaping in the login template...
CVE-2021-3346
Foris before 101.1.1, as used in Turris OS, lacks certain HTML escaping in the login template...
Design/Logic Flaw
Foris before 101.1.1, as used in Turris OS, lacks certain HTML escaping in the login template...
CVE-2021-3346
CVE-2021-3346 affects Foris before 101.1.1 as used in Turris OS, where the login template lacks certain HTML escaping. The consequence is a potential vulnerability due to insufficient input escaping in the login flow. The provided documents do not include explicit exploitation details, affected v...
CVE-2021-3346
Foris before 101.1.1, as used in Turris OS, lacks certain HTML escaping in the login template...
CVE-2021-3346
Foris before 101.1.1, as used in Turris OS, lacks certain HTML escaping in the login template...
PT-2021-20140
Name of the Vulnerable Software and Affected Versions Foris versions prior to 101.1.1 Description The issue is related to a lack of certain HTML escaping in the login template. This could potentially lead to security issues, but specific details about exploitation or affected devices are not...
CVE-2021-3346: Undefined Security Weakness
Foris before 101.1.1, as used in Turris OS, lacks certain HTML escaping in the login template...
Debian DLA-2526-1 : ruby-redcarpet security update
In Redcarpet before version 3.5.1, there is an injection vulnerability which can enable a cross-site scripting attack. In affected versions, no HTML escaping was being performed when processing quotes. This applies even when the :escapehtml option was being used. For Debian 9 stretch, this proble...
[SECURITY] [DLA 2526-1] ruby-redcarpet security update
----------------------------------------------------------------------- Debian LTS Advisory DLA-2526-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta January 15, 2021 https://wiki.debian.org/LTS -...