CVE-2021-26700

Visual Studio Code npm-script Extension Remote Code Execution Vulnerability...

CVE-2021-26700

Visual Studio Code npm-script Extension Remote Code Execution Vulnerability...

CVE-2021-26700 Visual Studio Code npm-script Extension Remote Code Execution Vulnerability

...

CVE-2021-26700

The CVE affects the Visual Studio Code npm-script Extension (eg2.vscode-npm-script). A malicious project can cause the extension to execute commands when a user views package.json, via a crafted repository and settings.json, enabling remote code execution in the user’s context. Public exploitatio...

CVE-2021-26700

creationtimestamp| type| source ---|---|--- 2021-02-17 12:03:59+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2707 2021-02-26 02:44:24+00:00| seen| https://t.me/cibsecurity/24185 2021-04-27 08:58:55+00:00| published-proof-of-concept| https://t.me/pwnwikizhchannel/264...

Exploit for CVE-2021-26700

RCE in NPM VSCode Extension Fixed 10th February 2021 in https...