Exposure of sensitive information to an unauthorized actor in Visual Studio Code allows an unauthorized attacker to disclose information over a network.
According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do? The user would have be enticed to open a malicious file in vscode. Users should never open anything that they do not know or trust to be safe.
hamayanhamayan, hamayanhamayan, <a href="https://www.linkedin.com/in/abhishek-kushwaha-b04341194/">Abhishek Kushwaha</a> with <a href="https://www.zeta.tech/us/">Zeta</a>, <a href="https://www.linkedin.com/in/abhishek-kushwaha-b04341194/">Abhishek Kushwaha</a> with <a href="https://www.zeta.tech/us/">Zeta</a>, <a href="https://github.com/jeroengui">Jeroen Gui</a>, <a href="https://github.com/jeroengui">Jeroen Gui</a>, <a href="https://bsky.app/profile/evilpacket.net">Adam Baldwin</a> with https://evilpacket.net/, <a href="https://x.com/arshadkazmi42">Codermak</a>, Anonymous, <a href="https://www.linkedin.com/in/marcelkarlsson/">whoismarcel</a>, Anonymous