9.6 CRITICAL
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Network (N)
- Attack Complexity (AC): Low (L)
- Privileges Required (PR): None (N)
- User Interaction (UI): Required (R)
- Scope (S): Changed (C)
- Confidentiality (C): High (H)
- Integrity (I): High (H)
- Availability (A): High (H)
- Modified Attack Vector (MAV): Network (N)
- Modified Attack Complexity (MAC): Low (L)
- Modified Privileges Required (MPR): None (N)
- Modified User Interaction (MUI): Required (R)
- Modified Confidentiality (MC): High (H)
- Modified Scope (MS): Changed (C)
- Modified Integrity (MI): High (H)
- Modified Availability (MA): High (H)
by @LeSuisse Activity log
- Created suggestion
- @LeSuisse dismissed (not in Nixpkgs)
Cline Kanban Server has a Cross-Origin WebSocket Hijacking Vulnerability
Cline is an autonomous coding agent as an SDK, IDE extension, or CLI assistant. In versions 2.13.0 and prior, there is a cross-origin WebSocket hijack vulnerability in Cline Kanban servers. At time of publication, there are no publicly available patches.
References
Affected products
- ==<= 2.13.0
Matching in nixpkgs
pkgs.execline
Small scripting language, to be used in place of a shell in non-interactive scripts
pkgs.execline-man-pages
Port of the documentation for the execline suite to mdoc
pkgs.haskellPackages.isocline
A portable alternative to GNU Readline
pkgs.skawarePackages.execline
Small scripting language, to be used in place of a shell in non-interactive scripts
pkgs.python312Packages.recline
None
pkgs.python313Packages.recline
This library helps you quickly implement an interactive command-based application
pkgs.python314Packages.recline
This library helps you quickly implement an interactive command-based application
pkgs.skawarePackages.execline-man-pages
Port of the documentation for the execline suite to mdoc
Package maintainers
-
@pmahoney Patrick Mahoney <pat@polycrystal.org>
-
@Profpatsch Profpatsch <mail@profpatsch.de>
-
@alyssais Alyssa Ross <hi@alyssa.is>
-
@sternenseemann Lukas Epple <sternenseemann@systemli.org>