Design/Logic Flaw

2021-03-1816:15:00

PRIOn knowledge base

www.prio-n.com

0.002 Low

EPSS

Percentile

60.0%

JSON

The unofficial apple/swift-format extension before 1.1.2 for Visual Studio Code allows remote attackers to execute arbitrary code by constructing a malicious workspace with a crafted apple-swift-format.path configuration value that triggers execution upon opening the workspace.

CPENameOperatorVersion
apple-swift-formatlt1.1.2

CPE	Name	Operator	Version
	apple-swift-format	lt	1.1.2

References

github.com/vknabel/vscode-apple-swift-format/releases/tag/1.1.2

vuln.ryotak.me/advisories/11

0.002 Low

EPSS

Percentile

60.0%

JSON

Related for PRION:CVE-2021-28789