Deserialization of untrusted data

2021-03-1816:15:00

PRIOn knowledge base

www.prio-n.com

0.003 Low

EPSS

Percentile

69.4%

JSON

The unofficial SwiftFormat extension before 1.3.7 for Visual Studio Code allows remote attackers to execute arbitrary code by constructing a malicious workspace with a crafted swiftformat.path configuration value that triggers execution upon opening the workspace.

CPENameOperatorVersion
swiftformatlt1.3.7

CPE	Name	Operator	Version
	swiftformat	lt	1.3.7

References

github.com/vknabel/vscode-swiftformat/releases/tag/1.3.7

vuln.ryotak.me/advisories/13

0.003 Low

EPSS

Percentile

69.4%

JSON

Related for PRION:CVE-2021-28791