Lucene search

K
osvGoogleOSV:GHSA-2GP3-6C9P-JP7W
HistoryMay 12, 2022 - 12:00 a.m.

Cross site scripting in code-server

2022-05-1200:00:40
Google
osv.dev
42
xss
code-server
vulnerability
crafted url
arbitrary code
software

EPSS

0.001

Percentile

35.3%

Cross-site scripting (XSS) vulnerability exists in Coder Code-Server before 3.12.0, allows attackers to execute arbitrary code via crafted URL.

EPSS

0.001

Percentile

35.3%

Related for OSV:GHSA-2GP3-6C9P-JP7W