Description
vscode-restructuredtext before 146.0.0 contains an incorrect access control vulnerability, where a crafted project folder could execute arbitrary binaries via crafted workspace configuration.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://github.com/vscode-restructuredtext/vscode-restructuredtext/releases ↗
- https://github.com/vscode-restructuredtext/vscode-restructuredtext/releases/tag/147.0.0 ↗
- https://github.com/vscode-restructuredtext/vscode-restructuredtext/commit/1dd3e878a5559e3dfe0e48f145c90418b208c5af ↗
- https://vuln.ryotak.me/advisories/37 ↗