CVE-2021-28162

6.1MEDIUM

In Eclipse Theia versions up to and including 0.16.0, in the notification messages there is no HTML escaping, so Javascript code can run.

发布于: 3/12/2021更新于: 11/21/2024
在NVD查看在MITRE查看

描述

In Eclipse Theia versions up to and including 0.16.0, in the notification messages there is no HTML escaping, so Javascript code can run.

AI分析AI驱动

受影响产品

eclipsetheia

参考资料