CVE-2019-18212: Path Traversal
XMLLanguageService.java in XML Language Server (aka lsp4xml) before 0.9.1, as used in Red Hat XML Language Support (aka vscode-xml) before 0.9.1 for Visual Studio and other products, allows a remote attacker to write to arbitrary files via Directory Traversal.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2019-18212?
The severity of CVE-2019-18212 is considered high due to the potential for remote file manipulation through directory traversal.
How do I fix CVE-2019-18212?
To fix CVE-2019-18212, upgrade the XML Language Server to version 0.9.1 or later.
What products are affected by CVE-2019-18212?
CVE-2019-18212 affects the XML Language Server prior to version 0.9.1 and related products like Red Hat XML Language Support.
Can CVE-2019-18212 lead to data breaches?
Yes, CVE-2019-18212 can lead to data breaches as it allows remote attackers to write to arbitrary files on the affected systems.
What vulnerabilities does CVE-2019-18212 exploit?
CVE-2019-18212 exploits a directory traversal vulnerability within the XML Language Server implementation.