CVE-2020-1481

A remote code execution vulnerability exists in the ESLint extension for Visual Studio Code when it validates source code after opening a project, aka 'Visual Studio Code ESLint Extention Remote Code Execution Vulnerability'.

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

23.56% chance of exploitation in the next 30 days, 98th percentile

Published

2020-07-14

Updated

2024-08-04

Proof-of-concept exploits (1)

• Rival420/CVE-2020-141818★ · 2025-03-06

References

• CVE Record
• NVD entry

Related

• CVE-2020-14181
• CVE-2023-23752
• CVE-2024-46987
• CVE-2020-14756
• CVE-2020-14815
• CVE-2020-14750