579 matches found
CVE-2022-0671
A flaw was found in vscode-xml in versions prior to 0.19.0. Schema download could lead to blind SSRF or DoS via a large file...
Server side request forgery (ssrf)
A flaw was found in vscode-xml in versions prior to 0.19.0. Schema download could lead to blind SSRF or DoS via a large file...
CVE-2022-0671
A flaw was found in vscode-xml in versions prior to 0.19.0. Schema download could lead to blind SSRF or DoS via a large file...
CVE-2022-0671
A flaw was found in vscode-xml in versions prior to 0.19.0. Schema download could lead to blind SSRF or DoS via a large file...
CVE-2022-0671
The connected sources confirm a vulnerability in vscode-xml prior to version 0.19.0 where downloading a schema can trigger blind SSRF or DoS via a large file. Affected component is the vscode-xml schema download/processing path; root cause is improper handling of externally downloaded schema data...
CVE-2022-0671
A flaw was found in vscode-xml in versions prior to 0.19.0. Schema download could lead to blind SSRF or DoS via a large file...
Red Hat Vscode-Xml 信息泄露漏洞
Red Hat Vscode-Xml is an open source Xml language support from Red Hat. It makes it easy to edit Xml in Visual Studio Code. An information disclosure vulnerability exists in Red Hat Vscode-Xml, which stems from a flaw found in versions of LemMinX prior to 0.19.0. An attacker could use this...
Red Hat Vscode-Xml 代码问题漏洞
Red Hat Vscode-Xml is an open source Xml language support from Red Hat. It makes it easy to edit Xml in Visual Studio Code. A code issue vulnerability exists in Red Hat Vscode-Xml, which stems from a flaw found in vcode -xml in versions prior to 0.19.0. An attacker could exploit this vulnerabilit...
CVE-2022-0671: Server-Side Request Forgery (SSRF)
A flaw was found in vscode-xml in versions prior to 0.19.0. Schema download could lead to blind SSRF or DoS via a large file...
PT-2022-13345
Name of the Vulnerable Software and Affected Versions vscode-xml versions prior to 0.19.0 Description A flaw was found in vscode-xml where schema download could lead to blind SSRF or DoS via a large file. Recommendations For versions prior to 0.19.0, update to version 0.19.0 or later to resolve t...
MongoDb For Vs Code 安全漏洞
MongoDb For Vs Code is for connecting to MongoDb and Atlas directly from a Vs Code environment, navigating databases and collections, examining the architecture and prototyping queries and aggregations using Playground. A security vulnerability in MongoDb For Vs Code, which arises from a user wit...
CVE-2021-30124
The unofficial vscode-phpmd aka PHP Mess Detector extension before 1.3.0 for Visual Studio Code allows remote attackers to execute arbitrary code via a crafted phpmd.command value in a workspace folder...
CVE-2021-30124
The unofficial vscode-phpmd aka PHP Mess Detector extension before 1.3.0 for Visual Studio Code allows remote attackers to execute arbitrary code via a crafted phpmd.command value in a workspace folder...
CVE-2021-30124
The unofficial vscode-phpmd aka PHP Mess Detector extension before 1.3.0 for Visual Studio Code allows remote attackers to execute arbitrary code via a crafted phpmd.command value in a workspace folder...
CVE-2021-30124
The unofficial vscode-phpmd aka PHP Mess Detector extension before 1.3.0 for Visual Studio Code allows remote attackers to execute arbitrary code via a crafted phpmd.command value in a workspace folder...
CVE-2021-30124
The CVE-2021-30124 issue affects the vscode-phpmd (PHP Mess Detector) extension for Visual Studio Code, specifically versions 1.3.0 and earlier. The root cause is a crafted phpmd.command value within a workspace folder that enables remote code execution. This results in arbitrary code execution w...
Malicious Package
Overview vscode-npm-script is a malicious package. It uses a preinstall script to steal environment variables. Remediation Avoid using all malicious instances of the vscode-npm-script package. Credit: Snyk Research...
PT-2021-18615 · Unknown · Vscode-Phpmd
Name of the Vulnerable Software and Affected Versions: vscode-phpmd extension version 1.3.0 and earlier Description: The issue allows remote attackers to execute arbitrary code via a crafted phpmd.command value in a workspace folder. Recommendations: For versions prior to 1.3.0, update to version...
CVE-2021-30124: Undefined Security Weakness
The unofficial vscode-phpmd aka PHP Mess Detector extension before 1.3.0 for Visual Studio Code allows remote attackers to execute arbitrary code via a crafted phpmd.command value in a workspace folder...