CVE-2020-7681

Directory Traversal

High · published July 25, 2020

CVSS v3.1
7.5
EPSS
2%
Percentile
77.5
In the wild
Unconfirmed
What it is

This affects all versions of package marscode. There is no path sanitization in the path provided at fs.readFile in index.js.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P
CVSS v4.0
Not supplied
EPSS
0.01738 · 77.5th percentile
Published
2020-07-25T08:35Z
EPSS history
Timeline
  • 25 JUL 08:35Z
    Directory Traversal
    cvelistv5