PT-2022-11652
CVE-2021-42648
·
تاريخ النشر
2022-05-11
·
تاريخ التحديث
2022-05-20
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Coder Code-Server versions prior to 3.12.0
Description
A cross-site scripting (XSS) issue exists, allowing attackers to execute arbitrary code via a crafted URL. This enables the execution of malicious scripts, potentially leading to unauthorized actions on the affected system.
Recommendations
For versions prior to 3.12.0, update to version 3.12.0 or later to resolve the issue. As a temporary workaround, consider restricting access to crafted URLs to minimize the risk of exploitation.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾