Vulnerabilities > CVE-2021-28472 - Unspecified vulnerability in Microsoft Vscode-Maven

CVSS 7.8 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

microsoft

NVD

Published: 2021-04-13

Updated: 2023-12-29

Summary

Visual Studio Code Maven for Java Extension Remote Code Execution Vulnerability

Vulnerable Configurations

Part	Description	Count
Application	Microsoft Microsoft Vscode Maven - Microsoft Vscode Maven 0.0.4 Microsoft Vscode Maven 0.0.5 Microsoft Vscode Maven 0.0.6 Microsoft Vscode Maven 0.1.0 Microsoft Vscode Maven 0.1.1 Microsoft Vscode Maven 0.1.2 Microsoft Vscode Maven 0.1.3 Microsoft Vscode Maven 0.1.4 Microsoft Vscode Maven 0.2.0 Microsoft Vscode Maven 0.2.1 Microsoft Vscode Maven 0.3.0 Microsoft Vscode Maven 0.4.0 Microsoft Vscode Maven 0.5.0 Microsoft Vscode Maven 0.5.1 Microsoft Vscode Maven 0.5.2 Microsoft Vscode Maven 0.6.0 Microsoft Vscode Maven 0.7.0 Microsoft Vscode Maven 0.8.0 Microsoft Vscode Maven 0.9.0 Microsoft Vscode Maven 0.9.1 Microsoft Vscode Maven 0.9.2 Microsoft Vscode Maven 0.10.0 Microsoft Vscode Maven 0.11.0 Microsoft Vscode Maven 0.11.1 Microsoft Vscode Maven 0.11.2 Microsoft Vscode Maven 0.11.3 Microsoft Vscode Maven 0.12.0 Microsoft Vscode Maven 0.12.1 Microsoft Vscode Maven 0.13.0 Microsoft Vscode Maven 0.14.0 Microsoft Vscode Maven 0.14.1 Microsoft Vscode Maven 0.14.2 Microsoft Vscode Maven 0.15.0 Microsoft Vscode Maven 0.15.1 Microsoft Vscode Maven 0.15.2 Microsoft Vscode Maven 0.16.0 Microsoft Vscode Maven 0.16.1 Microsoft Vscode Maven 0.16.2 Microsoft Vscode Maven 0.17.0 Microsoft Vscode Maven 0.17.1 Microsoft Vscode Maven 0.18.0 Microsoft Vscode Maven 0.18.1 Microsoft Vscode Maven 0.18.2 Microsoft Vscode Maven 0.19.0 Microsoft Vscode Maven 0.19.1 Microsoft Vscode Maven 0.20.0 Microsoft Vscode Maven 0.20.1 Microsoft Vscode Maven 0.20.2 Microsoft Vscode Maven 0.21.0 Microsoft Vscode Maven 0.21.1 Microsoft Vscode Maven 0.21.2 Microsoft Vscode Maven 0.21.3 Microsoft Vscode Maven 0.21.4 Microsoft Vscode Maven 0.22.0 Microsoft Vscode Maven 0.23.0 Microsoft Vscode Maven 0.24.0 Microsoft Vscode Maven 0.24.1 Microsoft Vscode Maven 0.24.2 Microsoft Vscode Maven 0.25.0 Microsoft Vscode Maven 0.26.0 Microsoft Vscode Maven 0.27.0 Microsoft Vscode Maven 0.28.0	63

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28472