Vulnerabilities

TI-2023-16031 CVE-2023-32766 · GHSA-gqx9-h3w2-fprg

Gitpod before 2022.11.3 allows XSS because redirection can occur for some protocols…

LOW 28

Gitpod before 2022.11.3 allows XSS because redirection can occur for some protocols outside of the trusted set of three (vscode: vscode-insiders: jetbrains-gateway:).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00555 Published 2023-06-05 Fixed in 2022.11.3 CWE-79

TI-2023-00908 CVE-2023-0957 · GHSA-f53g-frr2-jhpf

Origin validation error in Gitpod

MEDIUM 43

An issue was discovered in Gitpod versions prior to release-2022.11.2.16.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00416 Published 2023-03-03 Fixed in 2022.11.2 CWE-1385

TI-2021-14100 CVE-2021-35206 · GHSA-r48p-vhgj-x8mm

Gitpod before 0.6.0 allows unvalidated redirects.

LOW 30

Gitpod before 0.6.0 allows unvalidated redirects.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01177 Published 2021-06-22 No fix listed CWE-601

Vulnerabilities

Filters

Gitpod before 2022.11.3 allows XSS because redirection can occur for some protocols…

Origin validation error in Gitpod

Gitpod before 0.6.0 allows unvalidated redirects.