Description
Client side code execution in gitlab-vscode-extension v2.2.0 allows attacker to execute code on user system
Remediation
References
https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13279.json
https://gitlab.com/gitlab-org/gitlab-vscode-extension/-/issues/170
Related Vulnerabilities
CVE-2019-10347 Vulnerability in maven package javagh.jenkins:mashup-portlets-plugin
CVE-2020-10688 Vulnerability in maven package org.jboss.resteasy:resteasy-core
CVE-2017-3162 Vulnerability in maven package org.apache.hadoop:hadoop-hdfs
CVE-2023-24433 Vulnerability in maven package io.jenkins.plugins:macstadium-orka
CVE-2023-27602 Vulnerability in maven package org.apache.linkis:linkis-dist