CVE-2019-1351
HIGH 7.5EPSS 8.7%
A tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive paths, aka 'Git for Visual Studio Tampering Vulnerability'.
- Affected
- Microsoft · Microsoft Visual Studio 2017 version 15.9 (includes 15.1 - 15.8) · Microsoft Visual Studio 2017 · Microsoft Visual Studio 2019 · Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)
- CVSS v3.1 NVD
- 7.5 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - CVSS v2.0 NVD
- 5.0 MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N - EPSS
- 8.72% chance of exploitation in the next 30 days, 95th percentile
- Published
- 2020-01-24
- Updated
- 2024-08-04
Proof-of-concept exploits (1)
- JonasDL/PruebaCVE201913510★ · 2020-07-13
Security advisories
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1351
- http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00056.html