CVE-2019-18212

2019-10-2322:15:10

Google

osv.dev

7.3 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.8%

JSON

XMLLanguageService.java in XML Language Server (aka lsp4xml) before 0.9.1, as used in Red Hat XML Language Support (aka vscode-xml) before 0.9.1 for Visual Studio and other products, allows a remote attacker to write to arbitrary files via Directory Traversal.

CPENameOperatorVersion
lsp4xmleq0.5.0
lsp4xmleq0.0.2
lsp4xmleq0.6.0
lsp4xmleq0.3.0
lsp4xmleq0.0.1
lsp4xmleq0.7.0
lsp4xmleq0.9.0
lsp4xmleq0.5.1
lsp4xmleq0.4.0