CVEs-PoC/2021/CVE-2021-28161.md at 52f3262c8d52545fc4e20c2a38454fc446c51385 - CVEs-PoC - MS-GitHub-Backup (Gitea)

CalvinBackup/CVEs-PoC

mirror of https://github.com/0xMarcio/cve.git synced 2026-05-14 23:28:04 +02:00

Files

T

0xMarcio ba290685fe Update CVE sources 2024-06-09 00:33

2024-06-09 00:33:16 +00:00

810 B

Raw Blame History

CVE-2021-28161

Description

In Eclipse Theia versions up to and including 1.8.0, in the debug console there is no HTML escaping, so arbitrary Javascript code can be injected.

POC

Reference

Github

No PoCs found on GitHub currently.