Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Jyhtpyo

#43920of 53,634
6.1Total CVSS
Vulnerabilities · 1
PT-2022-11652
6.1
2022-05-11
Coder · Code-Server · CVE-2021-42648
**Name of the Vulnerable Software and Affected Versions** Coder Code-Server versions prior to 3.12.0 **Description** A cross-site scripting (XSS) issue exists, allowing attackers to execute arbitrary code via a crafted URL. This enables the execution of malicious scripts, potentially leading to unauthorized actions on the affected system. **Recommendations** For versions prior to 3.12.0, update to version 3.12.0 or later to resolve the issue. As a temporary workaround, consider restricting access to crafted URLs to minimize the risk of exploitation.