GHSA-2gp3-6c9p-jp7w

ghsaUSosv

Cross site scripting in code-server

view advisory published 2022-05-12Licence: CC-BY-4.0

Cross-site scripting (XSS) vulnerability exists in Coder Code-Server before 3.12.0, allows attackers to execute arbitrary code via crafted URL.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-42648US	medium6.1	0.87% (59th)	—	2022-05-11
Cross-site scripting (XSS) vulnerability exists in Coder Code-Server before 3.12.0, allows attackers to execute arbitrary code via crafted URL.

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.