Skip to content

CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-41038

In versions of the @theia/plugin-ext component of Eclipse Theia prior to 1.18.0, Webview contents can be hijacked via postMessage().

Read JSON ↗CVE.org ↗

Status: Published
Published: 2021-11-10
Updated: 2024-08-04
Assigning organization: eclipse

Description

In versions of the @theia/plugin-ext component of Eclipse Theia prior to 1.18.0, Webview contents can be hijacked via postMessage().

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

The Eclipse Foundation @theia/plugin-ext

unspecified to < 1.18.0affected

References