Lucene search
PRIOn knowledge basePRION:CVE-2023-26114HistoryMar 23, 2023 - 5:15 a.m.
Input validation
2023-03-2305:15:00
PRIOn knowledge base
www.prio-n.com
2
code-server
vulnerability
websockets
origin validation
data access
unauthorized connections
Versions of the package code-server before 4.10.1 are vulnerable to Missing Origin Validation in WebSockets handshakes. Exploiting this vulnerability can allow an adversary in specific scenarios to access data from and connect to the code-server instance.
| CPE | Name | Operator | Version |
|---|---|---|---|
| code-server | lt | 4.10.1 |
Related
veracode
veracode
Improper Validation
2023-03-24 08:53:03
github
github
code-server vulnerable to Missing Origin Validation in WebSockets
2023-03-23 06:30:15
cve
cve
CVE-2023-26114
2023-03-23 05:15:16
nvd
nvd
CVE-2023-26114
2023-03-23 05:15:16
osv
osv
CVE-2023-26114
2023-03-23 05:15:16
code-server vulnerable to Missing Origin Validation in WebSockets
2023-03-23 06:30:15
cvelist
cvelist
CVE-2023-26114
2023-03-23 05:00:01