Description

In Eclipse Theia 0.3.9 to 1.8.1, the "mini-browser" extension allows a user to preview HTML files in an iframe inside the IDE. But with the way it is made it is possible for a previewed HTML file to trigger an RCE. This exploit only happens if a user previews a malicious file..

Remediation

References

https://bugs.eclipse.org/bugs/show_bug.cgi?id=568018

Related Vulnerabilities

CVE-2020-28496 Vulnerability in npm package three

CVE-2020-7733 Vulnerability in npm package ua-parser-js

CVE-2023-39532 Vulnerability in npm package ses

CVE-2023-31065 Vulnerability in maven package org.apache.inlong:manager-web

CVE-2022-21680 Vulnerability in npm package marked

Severity

Critical

Classification

CWE-346 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Tags

Exploit Patch Vendor Advisory