CVE-2020-1481

🗓️ 14 Jul 2020 22:54:53Reported by microsoftType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 104 Views

Remote code execution vulnerability in ESLint extension for Visual Studio Code

Reporter	Title	Published	Views	Family All 13
GithubExploit	Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Atlassian Data_Center	26 Oct 202017:07	–	githubexploit
GithubExploit	Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Atlassian Data_Center	5 Feb 202107:48	–	githubexploit
Information Security Automation	Microsoft Patch Tuesday July 2020: my new open source project Vulristics, DNS SIGRed, RDP Client and SharePoint	2 Aug 202004:05	–	avleonov
CNVD	Microsoft Visual Studio Code ESLint Extention Command Injection Vulnerability	22 Jul 202000:00	–	cnvd
Cvelist	CVE-2020-1481	14 Jul 202022:54	–	cvelist
Kaspersky	KLA11859 Multiple vulnerabilities in Microsoft Developer Tools	14 Jul 202000:00	–	kaspersky
Tenable Nessus	Security Update for Microsoft Visual Studio Code ESLint Extension (July 2020)	16 Jul 202000:00	–	nessus
Microsoft CVE	Visual Studio Code ESLint Extension Remote Code Execution Vulnerability	14 Jul 202007:00	–	mscve
NVD	CVE-2020-1481	14 Jul 202023:15	–	nvd
OSV	CVE-2020-1481	14 Jul 202023:15	–	osv

NVD

Node

microsoft eslintRange<2.1.7

[
  {
    "product": "Microsoft Visual Studio Code ESLint extension",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  }
]

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1481

20 Aug 2025 13:05Current

9High risk

Vulners AI Score9

CVSS 3.18.8

CVSS 29.3

EPSS0.40495