Github.Com Gitpod-Io Gitpod vulnerabilities
2 known vulnerabilities affecting github.com/gitpod-io_gitpod.
Total CVEs
2
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM2
Vulnerabilities
Page 1 of 1
CVE-2023-32766P4MEDIUM≥ 0, < 2022.11.32023-06-05
CVE-2023-32766 [MEDIUM] CWE-79 Gitpod vulnerable to Cross-site Scripting
Gitpod vulnerable to Cross-site Scripting
Gitpod before 2022.11.3 allows XSS because redirection can occur for some protocols outside of the trusted set of three (vscode: vscode-insiders: jetbrains-gateway:).
ghsaosv
CVE-2024-21583P4MEDIUM≥ 0, ≤ 0.8.02024-07-19
CVE-2024-21583 [MEDIUM] CWE-15 github.com/gitpod-io/gitpod vulnerable to Cookie Tossing
github.com/gitpod-io/gitpod vulnerable to Cookie Tossing
Versions of the package github.com/gitpod-io/gitpod/components/server/go/pkg/lib before main-gha.27122; versions of the package github.com/gitpod-io/gitpod/components/ws-proxy/pkg/proxy before main-gha.27122; versions of the package github.com/gitpod-io/gitpod/install/installer/pkg/components/auth before main-gha.27122; versions of the package github.c
ghsaosv