Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
What security feature could be bypassed by successfully exploiting this vulnerability? An attacker who successfully exploited this vulnerability could bypass the Visual Studio Code Workspace Trust feature, allowing content from an untrusted workspace to run commands or code without the user first granting trust. See Workspace Trust for more information. According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability? Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system and the ability to manipulate its components to trigger a specific condition. Successful exploitation is not guaranteed and depends on a combination of factors that may include the environment, system configuration, and the presence of additional security measures.
<a href="https://www.linkedin.com/in/jiheun-kim/">l8BL</a> with <a href="https://enki.co.kr/">ENKI WhiteHat</a>