Source |
Bleeping Computer |
Identifiant |
2252450 |
Date de publication |
2021-01-27 05:05:05 (vue: 2021-01-27 13:05:16) |
Titre |
Here\'s how a researcher broke into Microsoft VS Code\'s GitHub |
Texte |
This month a researcher was awarded a bug bounty award of an undisclosed amount after he broke into the official GitHub repository of Microsoft Visual Studio Code.
A vulnerability in VS Code's issue management function and a lack of authentication checks enabled the researcher to obtain push access, and write to the repository. [...] |
Notes |
|
Envoyé |
Oui |
Condensat |
access after amount and a authentication award awarded bounty broke bug checks code enabled function github here how issue lack management microsoft month official push repository researcher studio to obtain undisclosed visual vulnerability write |
Tags |
Vulnerability
|
Stories |
|
Move |
|