Description (CNA)
In Eclipse Theia versions up to and including 1.8.0, in the debug console there is no HTML escaping, so arbitrary Javascript code can be injected.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| The Eclipse Foundation / Eclipse Theia | affected unspecified through 1.8.0 |
CWE
CWE-79
References
ADP enrichment
No English description supplied.