CVE-2021-28470: Visual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution Vulnerability
Published Apr 13, 2021
·Updated
Visual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution Vulnerability
Affected Software
1 affected component
Microsoft Visual Studio Code Github Pull Requests And Issues<0.25.1
Remediation
Event History
Apr 13, 2021
CVE Published
07:33 PM
Data Sourced
07:33 PM
DescriptionSeverity
Data Sourced
via NVD·08:15 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-28470?
CVE-2021-28470 is classified as a critical vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2021-28470?
To mitigate CVE-2021-28470, update the Visual Studio Code GitHub Pull Requests and Issues extension to version 0.25.1 or later.
3
What software is affected by CVE-2021-28470?
CVE-2021-28470 affects the GitHub Pull Requests and Issues extension for Visual Studio Code up to version 0.25.1.
4
What type of vulnerability is CVE-2021-28470?
CVE-2021-28470 is a remote code execution vulnerability.
5
Can CVE-2021-28470 be exploited remotely?
Yes, CVE-2021-28470 can be exploited remotely, allowing attackers to execute arbitrary code on affected systems.