high8.6
CVE-2020-13279
Client side code execution in gitlab-vscode-extension v2.2.0 allows attacker to execute code on user system
Impact
Client side code execution in gitlab-vscode-extension v2.2.0 allows attacker to execute code on user system
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gitlab | Gitlab-Vscode-Extension | through 2.2.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13279.json
- https://gitlab.com/gitlab-org/gitlab-vscode-extension/-/issues/170
- https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13279.json
- https://gitlab.com/gitlab-org/gitlab-vscode-extension/-/issues/170