I talk about a report I’ve made to MSRC in the beginning of the year regarding vscode.
It’s a bit different. There’s no in depth technical stuff, because I basically just reported the feature, not a bug.
It’s not a Feature, It’s a Vulnerability
Submitted 11 months ago by solidsnail@infosec.pub to cybersecurity@infosec.pub
https://blog.solidsnail.com/posts/vscode-shell-integ-rce