exploitDog

CVE-2021-35206

Опубликовано: 22 июн. 2021

Источник: nvd

CVSS3: 6.1

CVSS2: 5.8

EPSS Низкий

Описание

Gitpod before 0.6.0 allows unvalidated redirects.

Ссылки

https://github.com/gitpod-io/gitpod/blob/main/CHANGELOG.md
Release Notes
Third Party Advisory
https://github.com/gitpod-io/gitpod/commit/8ca431f86ae3a6f9a17afcfed51cdd065fcff1a5
Patch
Third Party Advisory
https://github.com/gitpod-io/gitpod/compare/0.6.0-beta5...0.6.0
Release Notes
Third Party Advisory
https://github.com/gitpod-io/gitpod/pull/2879
Exploit
Patch
Third Party Advisory
https://github.com/gitpod-io/gitpod/pull/2879#issuecomment-865662372
Patch
Third Party Advisory
https://github.com/gitpod-io/gitpod/pull/4567
Release Notes
Third Party Advisory
https://github.com/gitpod-io/gitpod/pull/4567/commits/f78b7d18e509e28e71b65bbd4dfd52c16ca57c18
Patch
Third Party Advisory
https://www.gitpod.io/changelog
Release Notes
Vendor Advisory
https://github.com/gitpod-io/gitpod/blob/main/CHANGELOG.md
Release Notes
Third Party Advisory
https://github.com/gitpod-io/gitpod/commit/8ca431f86ae3a6f9a17afcfed51cdd065fcff1a5
Patch
Third Party Advisory
https://github.com/gitpod-io/gitpod/compare/0.6.0-beta5...0.6.0
Release Notes
Third Party Advisory
https://github.com/gitpod-io/gitpod/pull/2879
Exploit
Patch
Third Party Advisory
https://github.com/gitpod-io/gitpod/pull/2879#issuecomment-865662372
Patch
Third Party Advisory
https://github.com/gitpod-io/gitpod/pull/4567
Release Notes
Third Party Advisory
https://github.com/gitpod-io/gitpod/pull/4567/commits/f78b7d18e509e28e71b65bbd4dfd52c16ca57c18
Patch
Third Party Advisory
https://www.gitpod.io/changelog
Release Notes
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gitpod:gitpod:*:*:*:*:*:*:*:*

Версия до 0.6.0 (исключая)

EPSS

Процентиль: 66%

0.00505

Низкий

6.1 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-601

Связанные уязвимости

GHSA-r48p-vhgj-x8mm

CVSS3: 6.1

github

больше 4 лет назад

Unvalidated redirects

EPSS

Процентиль: 66%

0.00505

Низкий

6.1 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-601