Skip to content
OpenAdvisories

Product · WSO2

WSO2 Integrator: MI for Visual Studio Code

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.0

    OS Command Injection via Unit Test Execution in WSO2 Integrator MI VS Code Extension Allows Arbitrary Command Execution

    The WSO2 Integrator MI VS Code extension fails to properly sanitize or validate user-supplied input when processing Micro Integrator projects opened from untrusted sources. This allows a crafted project to inject and execute arbitrary operating system command…