Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-sag9-sqet-g7a4
Vulnerability ID VCID-sag9-sqet-g7a4
Aliases CVE-2025-47269
GHSA-p483-wpfp-42cj
Summary code-server's session cookie can be extracted by having user visit specially crafted proxy URL A maliciously crafted URL using the `proxy` subpath can result in the attacker gaining access to the session token.
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-441 Unintended Proxy or Intermediary ('Confused Deputy')
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00331 https://api.first.org/data/v1/epss?cve=CVE-2025-47269
epss 0.00331 https://api.first.org/data/v1/epss?cve=CVE-2025-47269
epss 0.00331 https://api.first.org/data/v1/epss?cve=CVE-2025-47269
epss 0.00331 https://api.first.org/data/v1/epss?cve=CVE-2025-47269
epss 0.00331 https://api.first.org/data/v1/epss?cve=CVE-2025-47269
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-p483-wpfp-42cj
cvssv3.1 8.3 https://github.com/coder/code-server
generic_textual HIGH https://github.com/coder/code-server
cvssv3.1 8.3 https://github.com/coder/code-server/commit/47d6d3ada5aadef6d221f3d612401eb3dad9299e
generic_textual HIGH https://github.com/coder/code-server/commit/47d6d3ada5aadef6d221f3d612401eb3dad9299e
ssvc Track https://github.com/coder/code-server/commit/47d6d3ada5aadef6d221f3d612401eb3dad9299e
cvssv3.1 8.3 https://github.com/coder/code-server/releases/tag/v4.99.4
generic_textual HIGH https://github.com/coder/code-server/releases/tag/v4.99.4
ssvc Track https://github.com/coder/code-server/releases/tag/v4.99.4
cvssv3.1 8.3 https://github.com/coder/code-server/security/advisories/GHSA-p483-wpfp-42cj
cvssv3.1_qr HIGH https://github.com/coder/code-server/security/advisories/GHSA-p483-wpfp-42cj
generic_textual HIGH https://github.com/coder/code-server/security/advisories/GHSA-p483-wpfp-42cj
ssvc Track https://github.com/coder/code-server/security/advisories/GHSA-p483-wpfp-42cj
cvssv3.1 8.3 https://nvd.nist.gov/vuln/detail/CVE-2025-47269
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2025-47269
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2025-47269
https://github.com/coder/code-server
https://github.com/coder/code-server/commit/47d6d3ada5aadef6d221f3d612401eb3dad9299e
https://github.com/coder/code-server/releases/tag/v4.99.4
CVE-2025-47269 https://nvd.nist.gov/vuln/detail/CVE-2025-47269
GHSA-p483-wpfp-42cj https://github.com/advisories/GHSA-p483-wpfp-42cj
GHSA-p483-wpfp-42cj https://github.com/coder/code-server/security/advisories/GHSA-p483-wpfp-42cj
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L Found at https://github.com/coder/code-server
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L Found at https://github.com/coder/code-server/commit/47d6d3ada5aadef6d221f3d612401eb3dad9299e
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-05-10T01:44:34Z/ Found at https://github.com/coder/code-server/commit/47d6d3ada5aadef6d221f3d612401eb3dad9299e
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L Found at https://github.com/coder/code-server/releases/tag/v4.99.4
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-05-10T01:44:34Z/ Found at https://github.com/coder/code-server/releases/tag/v4.99.4
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L Found at https://github.com/coder/code-server/security/advisories/GHSA-p483-wpfp-42cj
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-05-10T01:44:34Z/ Found at https://github.com/coder/code-server/security/advisories/GHSA-p483-wpfp-42cj
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L Found at https://nvd.nist.gov/vuln/detail/CVE-2025-47269
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.56349
EPSS Score 0.00331
Published At June 5, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-04T16:23:58.941460+00:00 GitLab Importer Import https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/code-server/CVE-2025-47269.yml 38.6.0