Vulnerabilities

CVE-2021-28162 | BDVDB-2026-150424 Detail

The Eclipse FoundationEclipse Theia

Description#

In Eclipse Theia versions up to and including 0.16.0, in the notification messages there is no HTML escaping, so Javascript code can run.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-830 Inclusion of Web Functionality from an Untrusted Source

References#

https://github.com/eclipse-theia/theia/issues/7283

Exploit#

No public exploit known

History#

Version 12021-03-12Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.