CVE-2021-35206

Gitpod before 0.6.0 allows unvalidated redirects.

• CWE-601

• https://github.com/gitpod-io/gitpod/blob/main/CHANGELOG.mdRelease Notes, Third Party Advisory
• https://github.com/gitpod-io/gitpod/commit/8ca431f86ae3a6f9a17afcfed51cdd065fcff1a5Patch, Third Party Advisory
• https://github.com/gitpod-io/gitpod/compare/0.6.0-beta5...0.6.0Release Notes, Third Party Advisory
• https://github.com/gitpod-io/gitpod/pull/2879Exploit, Patch, Third Party Advisory
• https://github.com/gitpod-io/gitpod/pull/2879#issuecomment-865662372Patch, Third Party Advisory
• https://github.com/gitpod-io/gitpod/pull/4567Release Notes, Third Party Advisory
• https://github.com/gitpod-io/gitpod/pull/4567/commits/f78b7d18e509e28e71b65bbd4dfd52c16ca57c18Patch, Third Party Advisory
• https://www.gitpod.io/changelogRelease Notes, Vendor Advisory
• https://github.com/gitpod-io/gitpod/blob/main/CHANGELOG.mdRelease Notes, Third Party Advisory
• https://github.com/gitpod-io/gitpod/commit/8ca431f86ae3a6f9a17afcfed51cdd065fcff1a5Patch, Third Party Advisory
• https://github.com/gitpod-io/gitpod/compare/0.6.0-beta5...0.6.0Release Notes, Third Party Advisory
• https://github.com/gitpod-io/gitpod/pull/2879Exploit, Patch, Third Party Advisory
• https://github.com/gitpod-io/gitpod/pull/2879#issuecomment-865662372Patch, Third Party Advisory
• https://github.com/gitpod-io/gitpod/pull/4567Release Notes, Third Party Advisory
• https://github.com/gitpod-io/gitpod/pull/4567/commits/f78b7d18e509e28e71b65bbd4dfd52c16ca57c18Patch, Third Party Advisory
• https://www.gitpod.io/changelogRelease Notes, Vendor Advisory

Published

Jun 22, 2021

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-35200NETSCOUT nGeniusONE 6.3.0 build 1196 allows high-privileged …4.8
• CVE-2021-35201NEI in NETSCOUT nGeniusONE 6.3.0 build 1196 allows XML Exter…6.5
• CVE-2021-35202NETSCOUT Systems nGeniusONE 6.3.0 build 1196 allows Authoriz…4.3
• CVE-2021-35203NETSCOUT Systems nGeniusONE 6.3.0 build 1196 allows Arbitrar…5.7
• CVE-2021-35204NETSCOUT Systems nGeniusONE 6.3.0 build 1196 allows Reflecte…5.4
• CVE-2021-35205NETSCOUT Systems nGeniusONE version 6.3.0 build 1196 allows …5.4
• CVE-2021-35207An issue was discovered in Zimbra Collaboration Suite 8.8 be…6.1
• CVE-2021-35208An issue was discovered in ZmMailMsgView.js in the Calendar …5.4
• CVE-2021-35209An issue was discovered in ProxyServlet.java in the /proxy s…9.8
• CVE-2021-3521There is a flaw in RPM's signature functionality. OpenPGP su…4.7
• CVE-2021-35210Contao 4.5.x through 4.9.x before 4.9.16, and 4.10.x through…6.1
• CVE-2021-35211Microsoft discovered a remote code execution (RCE) vulnerabi…10