Lucene search

Gitpod Security Vulnerabilities

cve

CVE-2021-35206

Gitpod before 0.6.0 allows unvalidated redirects.

6.1CVSS

6.2AI Score

0.002EPSS

2021-06-22 02:15 PM

cve

CVE-2023-0957

An issue was discovered in Gitpod versions prior to release-2022.11.2.16. There is a Cross-Site WebSocket Hijacking (CSWSH) vulnerability that allows attackers to make WebSocket connections to the Gitpod JSONRPC server using a victim’s credentials, because the Origin header is not restricted. This ...

9.6CVSS

9AI Score

0.003EPSS

2023-03-03 08:15 AM

cve

CVE-2023-32766

Gitpod before 2022.11.3 allows XSS because redirection can occur for some protocols outside of the trusted set of three (vscode: vscode-insiders: jetbrains-gateway:).

6.1CVSS

6AI Score

0.001EPSS

2023-06-05 03:15 PM

111