writeups.xyz / Escaping well-configured VSCode extensions (for profit)

Submitter : c2a

Date: 23 February 2023

Bounty : 7,500

Vulnerabilities :

• Electron
• Webview
• Path Traversal

Programs :

• Microsoft

Authors :

• Vasco Franco

Link :
https://blog.trailofbits.com/2023/02/23/escaping-well-configured-vscode-extensions-for-profit/