Unscored CVE-2021-28967 EUVD-2021-15614GHSA-5cv2-5w57-p4x6

The unofficial MATLAB extension before 2.0.1 for Visual Studio Code allows attackers to execute arbitrary code via a crafted workspace beca…

Published Mar 24, 2021 · Updated Aug 3, 2024 · Assigned by mitre

Description

The unofficial MATLAB extension before 2.0.1 for Visual Studio Code allows attackers to execute arbitrary code via a crafted workspace because of lint configuration settings.

References

https://github.com/Gimly/vscode-matlab/releases
https://github.com/Gimly/vscode-matlab/commit/fc5dc53397677464099e80629e785a25718bf5ec
https://marketplace.visualstudio.com/items/Gimly81.matlab/changelog
https://vuln.ryotak.me/advisories/2