CVE-2021-41038
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.7%
exploitation probability
0.7%top 47% of all CVEs
observed exploitation
nono source reports it
In versions of the @theia/plugin-ext component of Eclipse Theia prior to 1.18.0, Webview contents can be hijacked via postMessage().
Affected products
The Eclipse Foundation · @theia/plugin-ext