CVE-2021-28162

6.1MEDIUM

In Eclipse Theia versions up to and including 0.16.0, in the notification messages there is no HTML escaping, so Javascript code can run.

Опубликовано: 3/12/2021Обновлено: 11/21/2024
Посмотреть на NVDПосмотреть на MITRE

Описание

In Eclipse Theia versions up to and including 0.16.0, in the notification messages there is no HTML escaping, so Javascript code can run.

ИИ-АнализНа базе ИИ

Затронутые продукты

eclipsetheia

Ссылки