CVE-2023-26114

CVE-2023-26114 affects code-server prior to version 4.10.1. The vulnerability is Missing Origin Validation in WebSocket handshakes, which could allow an attacker in certain scenarios to access data from and connect to a code-server instance. Exploitation context and impact are described in the CV...