CVE-2021-28472: microsoft vscode-maven – CVSS 7.8 · Watchpost

← All vulnerabilities

CVE-2021-28472

高危 7.8CVE-2021-28472 · Published 13/04/2021 · updated 17/06/2026

要点

CVE-2021-28472 是影响 vscode-maven (microsoft) 的高危 (CVSS 7.8)漏洞。
未来 30 天内被利用的概率（EPSS）：61.8%，高于 99.2% 的漏洞。
修复：升级到 0.29.0 或更高版本。

Package	Affected versions	Patched versions
vscode-maven microsoft	`< 0.29.0`	`0.29.0`

Description

Visual Studio Code Maven for Java Extension Remote Code Execution Vulnerability

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28472 · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free