Lucene search

[email protected]CVE-2023-46944

HistoryNov 28, 2023 - 10:15 p.m.

CVE-2023-46944

2023-11-2822:15:06

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2023-46944

gitkraken

gitlens

arbitrary code execution

security vulnerability

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.2 High

AI Score

Confidence

Low

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

66.0%

JSON

An issue in GitKraken GitLens before v.14.0.0 allows an attacker to execute arbitrary code via a crafted file to the Visual Studio Codes workspace trust component.

CPENameOperatorVersion
gitkraken:gitlensgitkraken gitlenslt14.0.0
gitkraken:gitlensgitkraken gitlenseq10.0.1
gitkraken:gitlensgitkraken gitlenseq7.5.8
gitkraken:gitlensgitkraken gitlenseq13.3.1
gitkraken:gitlensgitkraken gitlenseq11.4.1
gitkraken:gitlensgitkraken gitlenseq4.0.0
gitkraken:gitlensgitkraken gitlenseq9.5.0
gitkraken:gitlensgitkraken gitlenseq8.2.4
gitkraken:gitlensgitkraken gitlenseq6.1.0
gitkraken:gitlensgitkraken gitlenseq7.5.4

CPE	Name	Operator	Version
gitkraken:gitlens	gitkraken gitlens	lt	14.0.0
gitkraken:gitlens	gitkraken gitlens	eq	10.0.1
gitkraken:gitlens	gitkraken gitlens	eq	7.5.8
gitkraken:gitlens	gitkraken gitlens	eq	13.3.1
gitkraken:gitlens	gitkraken gitlens	eq	11.4.1
gitkraken:gitlens	gitkraken gitlens	eq	4.0.0
gitkraken:gitlens	gitkraken gitlens	eq	9.5.0
gitkraken:gitlens	gitkraken gitlens	eq	8.2.4
gitkraken:gitlens	gitkraken gitlens	eq	6.1.0
gitkraken:gitlens	gitkraken gitlens	eq	7.5.4

Rows per page:

1-10 of 1671

References

github.com/gitkraken/vscode-gitlens/commit/ee2a0c42a92d33059a39fd15fbbd5dd3d5ab6440

www.sonarsource.com/blog/vscode-security-markdown-vulnerabilities-in-extensions/

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.2 High

AI Score

Confidence

Low

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

66.0%

JSON

Related for CVE-2023-46944

osv1 packetstorm1 zdt1 prion1 cvelist1 rapid7blog1