CVE-2021-30124

2021-07-3014:15:16

Google

osv.dev

8.1 High

AI Score

Confidence

High

0.028 Low

EPSS

Percentile

90.7%

JSON

The unofficial vscode-phpmd (aka PHP Mess Detector) extension before 1.3.0 for Visual Studio Code allows remote attackers to execute arbitrary code via a crafted phpmd.command value in a workspace folder.

CPENameOperatorVersion
vscode-phpmdeq1.0.1
vscode-phpmdeq0.4.0-de
vscode-phpmdeq0.3.0-de
vscode-phpmdeq0.5.0-de
vscode-phpmdeq0.1.0-de
vscode-phpmdeq1.0.2
vscode-phpmdeq0.2.0-de
vscode-phpmdeq1.0.0
vscode-phpmdeq1.0.3

Name	Operator	Version
vscode-phpmd	eq	1.0.1
vscode-phpmd	eq	0.4.0-de
vscode-phpmd	eq	0.3.0-de
vscode-phpmd	eq	0.5.0-de
vscode-phpmd	eq	0.1.0-de
vscode-phpmd	eq	1.0.2
vscode-phpmd	eq	0.2.0-de
vscode-phpmd	eq	1.0.0
vscode-phpmd	eq	1.0.3