CVE-2021-28162
Assigner: eclipse
Published: 2021-03-12T21:40:15
State: PUBLISHED
affected: product: Eclipse Theia
vendor: The Eclipse Foundation
versions: lessThanOrEqual: 0.16.0
status: affected
version: unspecified
versionType: custom
descriptions: value: In Eclipse Theia versions up to and including 0.16.0, in the notification messages there is no HTML escaping, so Javascript code can run.
problemTypes: descriptions: cweId: CWE-830
description: CWE-830: Inclusion of Web Functionality from an Untrusted Source
type: CWE