CVE:CVE-2020-27224
CNNVD:CNNVD-202102-1572
Eclipse Theia是Eclipse基金会的一套基于Visual Studio Code的用于桌面和Web应用程序的开源集成开发环境框架。
Eclipse Theia versions up to and including 1.2.0 存在跨站脚本漏洞，攻击者可利用该漏洞执行任意代码。
solution:Upgrade eclipse theia to a higher version than 1.2.0,and avoid the version (,1.2.0]