CVE-2021-42648

MEDIUM CVSS: 6.1 Published: 2022-05-11 Modified: 2026-06-17

Description

Cross-site scripting (XSS) vulnerability exists in Coder Code-Server before 3.12.0, allows attackers to execute arbitrary code via crafted URL.

Affected Platforms

Coder Code-Server

Weakness Type

CWE-79

References