CVE-2023-32766

Published: Jun 5, 2023

Modified: Jan 31, 2025

PUBLISHED

Description

Gitpod before 2022.11.3 allows XSS because redirection can occur for some protocols outside of the trusted set of three (vscode: vscode-insiders: jetbrains-gateway:).

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://www.gitpod.io

https://github.com/gitpod-io/gitpod/commit/6771283c3406586e352337675b79ff2ca50f191b

https://github.com/gitpod-io/gitpod/compare/release-2022.11.2...2022.11.3

https://github.com/gitpod-io/gitpod/releases/tag/2022.11.3

https://github.com/gitpod-io/gitpod/pull/17559

https://app.safebase.io/portal/71ccd717-aa2d-4a1e-942e-c768d37e9e0c/preview?product=default&tcuUid=1d505bda-9a38-4ca5-8724-052e6337f34d

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2023-32766

Description

Affected Products

References