Lucene search
Veracode Vulnerability DatabaseVERACODE:39939HistoryMar 24, 2023 - 8:53 a.m.
Improper Validation
2023-03-2408:53:03
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
code-server vulnerability
improper validation
unauthorized access
software vulnerability
0.001 Low
EPSS
Percentile
47.6%
code-server, is vulnerable to Improper Validation. The vulnerability exists due to missing WebSocket origin validations handshakes which allows an attacker to gain access to the server and perform unauthorized actions.
| CPE | Name | Operator | Version |
|---|---|---|---|
| code-server | le | 4.10.0 | |
| code-server | le | 4.10.0 |
Related
osv
osv
CVE-2023-26114
2023-03-23 05:15:16
code-server vulnerable to Missing Origin Validation in WebSockets
2023-03-23 06:30:15
cvelist
cvelist
CVE-2023-26114
2023-03-23 05:00:01
github
github
code-server vulnerable to Missing Origin Validation in WebSockets
2023-03-23 06:30:15
cve
cve
CVE-2023-26114
2023-03-23 05:15:16
nvd
nvd
CVE-2023-26114
2023-03-23 05:15:16
prion
prion
Input validation
2023-03-23 05:15:00