CVE-2022-0671

CVE-2022-0671

EPSS 1.2%CWE-918

A flaw was found in vscode-xml in versions prior to 0.19.0. Schema download could lead to blind SSRF or DoS via a large file.

Produtos afetados

n/a · vscode-xml

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://github.com/eclipse/lemminx/blob/master/CHANGELOG.md#0190-february-14-2022 https://github.com/redhat-developer/vscode-xml/blob/master/CHANGELOG.md#0190-february-14-2022