Vulnerabilities

CVE-2021-28161 | BDVDB-2026-150423 Detail

The Eclipse FoundationEclipse Theia

Description#

In Eclipse Theia versions up to and including 1.8.0, in the debug console there is no HTML escaping, so arbitrary Javascript code can be injected.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References#

https://github.com/eclipse-theia/theia/issues/8794

Exploit#

No public exploit known

History#

Version 12021-03-12Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.