CVE-2021-41038CWE-940

CVE-2021-41038: vulnerability in The Eclipse Foundation @theia/plugin-ext

Published · Updated

Follow this CVE+ Monitor @theia/plugin-ext+ Monitor @theia/plugin-ext

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.7%
In versions of the @theia/plugin-ext component of Eclipse Theia prior to 1.18.0, Webview contents can be hijacked via postMessage().
Affected products
The Eclipse Foundation · @theia/plugin-ext