CVE-2019-18212
XMLLanguageService.java in XML Language Server (aka lsp4xml) before 0.9.1, as used in Red Hat XML Language Support (aka vscode-xml) before 0.9.1 for V...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
XMLLanguageService.java in XML Language Server (aka lsp4xml) before 0.9.1, as used in Red Hat XML Language Support (aka vscode-xml) before 0.9.1 for Visual Studio and other products, allows a remote attacker to write to arbitrary files via Directory Traversal.
Références
- advisory github.com
- advisory marketplace.visualstudio.com
- patch github.com
- patch github.com
- report shielder.it
- web github.com