Remote code execution

2021-04-1604:15:00

PRIOn knowledge base

www.prio-n.com

9.6 High

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

86.2%

The unofficial vscode-rpm-spec extension before 0.3.2 for Visual Studio Code allows remote code execution via a crafted workspace configuration.

CPENameOperatorVersion
rpm_speclt0.3.2

CPE	Name	Operator	Version
	rpm_spec	lt	0.3.2

References

github.com/LaurentTreguier/vscode-rpm-spec/commit/e19fb8e29cb48cadfd3238371e060d4ffd3384f9

vuln.ryotak.me/advisories/36