CVE-2020-17023 Visual Studio JSON Remote Code Execution Vulnerability

🗓️ 16 Oct 2020 22:18:12Reported by microsoftType

CVE-2020-17023 Visual Studio JSON Remote Code Execution Vulnerabilit

Reporter	Title	Published	Views	Family All 15
BDU FSTEC	The vulnerability of the JSON editor component in Visual Studio Code, a tool for software development by Microsoft Visual Studio, arises from insufficient input data validation. This allows attackers to execute arbitrary code.	29 Oct 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Visual Studio Code’s source editor arises from insufficient validation of input data, allowing attackers to execute arbitrary code.	26 Nov 202000:00	–	bdu_fstec
CISA	Microsoft Releases Security Updates to Address Remote Code Execution Vulnerabilities	16 Oct 202000:00	–	cisa
CNVD	Microsoft Visual Studio Code Remote Code Execution Vulnerability	28 Oct 202000:00	–	cnvd
CVE	CVE-2020-17023	16 Oct 202022:18	–	cve
EUVD	EUVD-2020-8980	16 Oct 202022:18	–	euvd
Kaspersky	KLA11980 ACE vulnerability in Microsoft Developer Tools	15 Oct 202000:00	–	kaspersky
Microsoft CVE	Visual Studio JSON Remote Code Execution Vulnerability	15 Oct 202007:00	–	mscve
NCSC	Vulnerability fixed in Visual Studio	19 Oct 202000:00	–	ncsc
NVD	CVE-2020-17023	16 Oct 202023:15	–	nvd

[
  {
    "vendor": "Microsoft",
    "product": "Visual Studio Code",
    "cpes": [
      "cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "1.0.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17023

31 Dec 2023 19:20Current

7.6High risk

Vulners AI Score7.6

CVSS 3.17.8

EPSS0.18013