CVE-2021-34479 - log back

CVE-2021-34479 edited at 29 Sep 2021 08:59:39
Description
- A security issue has been found in Microsoft Visual Studio. Guessable nonces in WebView could be abused for content spoofing.
+ A security issue has been found in Visual Studio Code before version 1.59.0. Guessable nonces in WebView could be abused for content spoofing.
CVE-2021-34479 edited at 14 Jul 2021 19:28:24
Description
- Microsoft Visual Studio Spoofing Vulnerability.
+ A security issue has been found in Microsoft Visual Studio. Guessable nonces in WebView could be abused for content spoofing.
References
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-34479
+ https://github.com/microsoft/vscode/issues/128557
+ https://github.com/microsoft/vscode/commit/5b8ce768f38a9466e493a63499b32fbea7e2f7bb
CVE-2021-34479 edited at 14 Jul 2021 19:25:02
Severity
- Unknown
+ Medium
Remote
- Unknown
+ Local
Type
- Unknown
+ Content spoofing
Description
+ Microsoft Visual Studio Spoofing Vulnerability.
References
+ https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-34479
Notes
CVE-2021-34479 created at 14 Jul 2021 19:23:16