Gitpod before 2022.11.3 allows XSS because redirection can occur for some protocols outside of the trusted set of three (vscode: vscode-insiders: jetbrains-gateway:).
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| github.com/gitpod-io/gitpod(Go) | 0 | 2022.11.3 | N/A |
CVSS Metrics
