Visual Studio Code Relative Path Traversal Vulnerability Allowing Information Disclosure

A relative path traversal vulnerability has been identified in Visual Studio Code. This issue allows an unauthorized attacker to disclose local information by exploiting the vulnerability to gain unauthorized access to the file system, specifically file path information. The vulnerability arises from improper validation of file paths, which could be manipulated to traverse directories and access restricted files.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure, allowing attackers to access sensitive file system data.

Remediation

Users are advised to update to the latest version of the Visual Studio Code Live Preview extension, available on the Visual Studio Marketplace.