CVE-2019-18212

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

XMLLanguageService.java in XML Language Server (aka lsp4xml) before 0.9.1, as used in Red Hat XML Language Support (aka vscode-xml) before 0.9.1 for Visual Studio and other products, allows a remote attacker to write to arbitrary files via Directory Traversal.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-22

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/angelozerr/lsp4xml/Product
https://github.com/angelozerr/lsp4xml/blob/master/CHANGELOG.md#othersRelease Notes, Third Party Advisory
https://github.com/angelozerr/lsp4xml/pull/567Patch, Third Party Advisory
https://github.com/redhat-developer/vscode-xml/Patch, Third Party Advisory
https://marketplace.visualstudio.com/items?itemName=redhat.vscode-xmlThird Party Advisory
https://www.shielder.it/blog/dont-open-that-xml-xxe-to-rce-in-xml-plugins-for-vs-code-eclipse-theia/Exploit, Third Party Advisory
https://github.com/angelozerr/lsp4xml/Product
https://github.com/angelozerr/lsp4xml/blob/master/CHANGELOG.md#othersRelease Notes, Third Party Advisory
https://github.com/angelozerr/lsp4xml/pull/567Patch, Third Party Advisory
https://github.com/redhat-developer/vscode-xml/Patch, Third Party Advisory
https://marketplace.visualstudio.com/items?itemName=redhat.vscode-xmlThird Party Advisory
https://www.shielder.it/blog/dont-open-that-xml-xxe-to-rce-in-xml-plugins-for-vs-code-eclipse-theia/Exploit, Third Party Advisory

Timeline

Published: Oct 23, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-182138.8XML Language Server (aka lsp4xml) before 0.9.1, as used in Red Hat XML Language Support (aka vscode-xml) before 0.9.1 for Visual Studio and CVE-2019-182147.7The Video_Converter app 0.1.0 for Nextcloud allows denial of service (CPU and memory consumption) via multiple concurrent conversions becaus CVE-2019-182157.8An issue was discovered in signmgr.dll 6.5.0.819 in Comodo Internet Security through 12.0. A DLL Preloading vulnerability allows an attacker CVE-2019-182166.8The BIOS configuration design on ASUS ROG Zephyrus M GM501GS laptops with BIOS 313 relies on the main battery instead of using a CMOS batter CVE-2019-182177.5ProFTPD before 1.3.6b and 1.3.7rc before 1.3.7rc2 allows remote unauthenticated denial-of-service due to incorrect handling of overly long c CVE-2019-182187.8cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer o CVE-2019-182196.1Sitemagic CMS 4.4.1 is affected by a Cross-Site-Scripting (XSS) vulnerability, as it fails to validate user input. The affected components (CVE-2019-18227.2A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manage CVE-2019-182208.8Sitemagic CMS 4.4.1 is affected by a Cross-Site-Request-Forgery (CSRF) issue as it doesn't implement any method to validate incoming request CVE-2019-182216.1CoreHR Core Portal before 27.0.7 allows stored XSS.CVE-2019-182224.7The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through 2.19.1 does not reduce the blinded scalar before c CVE-2019-182235.4ZOOM International Call Recording 6.3.1 suffers from multiple authenticated stored XSS vulnerabilities via the phoneNumber field in the (1)