CVE-2022-0671CWE-918

CVE-2022-0671: vulnerability in vscode-xml

Published · Updated

Follow this CVE+ Monitor vscode-xml+ Monitor org.eclipse.lemminx:lemminx-parent

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.3%
A flaw was found in vscode-xml in versions prior to 0.19.0. Schema download could lead to blind SSRF or DoS via a large file.
Affected products
n/a · vscode-xml