MSRC-CVE-2023-36018 — Visual Studio Code Jupyter Extension Spoofing Vulnerability

Summary

Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

According to the CVSS metrics, successful exploitation of this vulnerability could lead to major loss of confidentiality (C:H), integrity (I:H), and availability (A:H). What does that mean for this vulnerability?
An attacker who successfully exploited this vulnerability could gain high privileges, which include read, write, and delete functionality.

Security updates
2023.10.1100000000 — https://marketplace.visualstudio.com/items/ms-toolsai.jupyter/changelog

Vulnerabilities 1

High 7.8

CVE-2023-36018

Visual Studio Code Jupyter Extension Spoofing Vulnerability

Visual Studio Code Jupyter Extension Spoofing Vulnerability

Microsoft Jupyter Extension for Visual Studio Code

Nov 14, 2023

Revision history

2024-01-18 #2
Added acknowledgements. This is an informational change only.
2023-11-14 #1
Information published.

References

CVE-2023-36018 Visual Studio Code Jupyter Extension Spoofing Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36018
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss