Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q58h-4hfv-p9c7

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The unofficial SwiftFormat extension before 1.3.7 for Visual Studio Code allows remote attackers to execute arbitrary code by constructing a malicious workspace with a crafted swiftformat.path configuration value that triggers execution upon opening the workspace.

The unofficial SwiftFormat extension before 1.3.7 for Visual Studio Code allows remote attackers to execute arbitrary code by constructing a malicious workspace with a crafted swiftformat.path configuration value that triggers execution upon opening the workspace.

EPSS

Процентиль: 80%
0.01388
Низкий

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 7.8
nvd
почти 5 лет назад

The unofficial SwiftFormat extension before 1.3.7 for Visual Studio Code allows remote attackers to execute arbitrary code by constructing a malicious workspace with a crafted swiftformat.path configuration value that triggers execution upon opening the workspace.

EPSS

Процентиль: 80%
0.01388
Низкий

Дефекты

CWE-863