CVE-2022-0671

2022-02-1817:50:39

CWE-918

redhat

www.cve.org

9.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.3%

JSON

A flaw was found in vscode-xml in versions prior to 0.19.0. Schema download could lead to blind SSRF or DoS via a large file.

CNA Affected

[
  {
    "product": "vscode-xml",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "vscode-xml versions prior to 0.19.0"
      }
    ]
  }
]

References

github.com/eclipse/lemminx/blob/master/CHANGELOG.md#0190-february-14-2022

github.com/redhat-developer/vscode-xml/blob/master/CHANGELOG.md#0190-february-14-2022