CVE-2023-46944

ALTO 7.8CVE-2023-46944 · Published 28/11/2023 · updated 17/06/2026

In breve

CVE-2023-46944 è una vulnerabilità ALTO (CVSS 7.8) che riguarda gitlens (gitkraken).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.3%, superiore al 71.1% delle vulnerabilità.
Correzione: aggiornare a 14.0.0 o successiva.

Package	Affected versions	Patched versions
gitlens gitkraken	`< 14.0.0`	`14.0.0`

Description

An issue in GitKraken GitLens before v.14.0.0 allows an attacker to execute arbitrary code via a crafted file to the Visual Studio Codes workspace trust component.

References

gitkraken/vscode-gitlens commit ee2a0c4 · Patch
sonarsource.com/blog/vscode-security-markdown-vulnerabilities-in-extensions · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free