Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7qqp-g74r-7vjv

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The unofficial SwiftLint extension before 1.4.5 for Visual Studio Code allows remote attackers to execute arbitrary code by constructing a malicious workspace with a crafted swiftlint.path configuration value that triggers execution upon opening the workspace.

The unofficial SwiftLint extension before 1.4.5 for Visual Studio Code allows remote attackers to execute arbitrary code by constructing a malicious workspace with a crafted swiftlint.path configuration value that triggers execution upon opening the workspace.

EPSS

Процентиль: 80%
0.0143
Низкий

Связанные уязвимости

CVSS3: 7.8
nvd
почти 5 лет назад

The unofficial SwiftLint extension before 1.4.5 for Visual Studio Code allows remote attackers to execute arbitrary code by constructing a malicious workspace with a crafted swiftlint.path configuration value that triggers execution upon opening the workspace.

EPSS

Процентиль: 80%
0.0143
Низкий