Gitpod

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Gitpod records in CISA KEV

No Gitpod vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Gitpod 3 records MEDIUM

Records

3 records in Gitpod · all components

TI-2023-00908 CVE-2023-0957 · GHSA-f53g-frr2-jhpf

Origin validation error in Gitpod

MEDIUM 43

An issue was discovered in Gitpod versions prior to release-2022.11.2.16.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00416 Published 2023-03-03 Fixed in 2022.11.2 CWE-1385

TI-2021-14100 CVE-2021-35206 · GHSA-r48p-vhgj-x8mm

Gitpod before 0.6.0 allows unvalidated redirects.

LOW 30

Gitpod before 0.6.0 allows unvalidated redirects.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01177 Published 2021-06-22 No fix listed CWE-601

TI-2023-16031 CVE-2023-32766 · GHSA-gqx9-h3w2-fprg

Gitpod before 2022.11.3 allows XSS because redirection can occur for some protocols…

LOW 28

Gitpod before 2022.11.3 allows XSS because redirection can occur for some protocols outside of the trusted set of three (vscode: vscode-insiders: jetbrains-gateway:).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00555 Published 2023-06-05 Fixed in 2022.11.3 CWE-79

Open these records in search →

Critical	1
High	0
Medium	2
Low	0
No CVSS	0