Описание
Cross-site Scripting (XSS) in Eclipse Theia
In Eclipse Theia versions up to and including 1.2.0, the Markdown Preview (@theia/preview), can be exploited to execute arbitrary code.
Пакеты
Наименование
@theia/preview
npm
Затронутые версииВерсия исправления
< 1.2.0
1.3.0
Связанные уязвимости
CVSS3: 9.6
nvd
почти 5 лет назад
In Eclipse Theia versions up to and including 1.2.0, the Markdown Preview (@theia/preview), can be exploited to execute arbitrary code.