Description

In Eclipse Theia 0.3.9 to 1.8.1, the "mini-browser" extension allows a user to preview HTML files in an iframe inside the IDE. But with the way it is made it is possible for a previewed HTML file to trigger an RCE. This exploit only happens if a user previews a malicious file..

Remediation

References

https://bugs.eclipse.org/bugs/show_bug.cgi?id=568018

Related Vulnerabilities

CVE-2023-25158 Vulnerability in maven package org.geotools:gt-jdbc

CVE-2023-41327 Vulnerability in maven package org.wiremock:wiremock-webhooks-extension

CVE-2023-39010 Vulnerability in maven package org.boofcv:boofcv-core

CVE-2023-26056 Vulnerability in maven package org.xwiki.platform:xwiki-platform-rendering-macro-context

CVE-2022-31129 Vulnerability in maven package org.webjars.bowergithub.moment:moment

Severity

Critical

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Tags

Exploit Patch Vendor Advisory CWE-942