Medium · 6.1 CVE-2021-42648 EUVD-2022-1985GHSA-2gp3-6c9p-jp7w

Cross site scripting in code-server

Published May 11, 2022 · Updated Aug 4, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability exists in Coder Code-Server before 3.12.0, allows attackers to execute arbitrary code via crafted URL.

Ecosystem	Package	Affected	Fixed	Record
npm	code-server	< 3.12.0	3.12.0	GHSA-2gp3-6c9p-jp7w