Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-32766
6.1
MEDIUMCVSS v3
Published
June 5, 2023
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Gitpod before 2022.11.3 allows XSS because redirection can occur for some protocols outside of the trusted set of three (vscode: vscode-insiders: jetbrains-gateway:).
gitpod-io/gitpod
GitHubThe developer platform for on-demand cloud development environments to create software faster and more securely.
GitHubThe developer platform for on-demand cloud development environments to create software faster and more securely.< 2022.11.3NVD