Описание
Microsoft Visual Studio Code CoPilot Chat Security Feature Bypass Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
FAQ
What kind of security feature could be bypassed by successfully exploiting this vulnerability?
The authentication feature could be bypassed as this vulnerability allows impersonation.
Обновления
| Продукт | Статья | Обновление |
|---|---|---|
| Microsoft Visual Studio Code CoPilot Chat Extension |
Показывать по
Возможность эксплуатации
Publicly Disclosed
Exploited
Latest Software Release
EPSS
8.4 High
CVSS3
Связанные уязвимости
Improper limitation of a pathname to a restricted directory ('path traversal') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
Improper limitation of a pathname to a restricted directory ('path traversal') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
Уязвимость редактора исходного кода Microsoft Visual Studio Code, связанная с неверным ограничением имени пути к каталогу, позволяющая нарушителю обойти существующие ограничения безопасности
EPSS
8.4 High
CVSS3