Coder · Code-Server · CVE-2021-42648
**Name of the Vulnerable Software and Affected Versions**
Coder Code-Server versions prior to 3.12.0
**Description**
A cross-site scripting (XSS) issue exists, allowing attackers to execute arbitrary code via a crafted URL. This enables the execution of malicious scripts, potentially leading to unauthorized actions on the affected system.
**Recommendations**
For versions prior to 3.12.0, update to version 3.12.0 or later to resolve the issue. As a temporary workaround, consider restricting access to crafted URLs to minimize the risk of exploitation.