Intrusion PreventionMS.Windows.Visual.Studio.Code.Git.Extension.Argument.Injection
Description
This indicates an attack attempt to exploit an Argument Injection Vulnerability in Microsoft Visual Studio Code.
The vulnerability is due to improper input validation of URL handlers. A remote attacker can exploit this vulnerability by enticing a target user into opening a crafted URL in Visual Studio Code. Successful exploitation results in the execution of arbitrary code under the security context of the target user.
Affected Products
Microsoft Visual Studio Code prior to 1.67.1
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-30129
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 52151 |
| Created | Sep 21, 2022 |
| Updated | Oct 07, 2022 |
| Risk |
|
| CVE ID | CVE-2022-30129 |
| Exploit Prediction Score | 47.64% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux, MacOS |
| Affected App | Other |