RCE in Visual Studio Code’s Remote WSL for Fun and Negative Profit
parsiya.net
The Visual Studio Code server in Windows Subsystem for Linux uses a local WebSocket WebSocket connection to communicate with the Remote WSL extension. JavaScript in websites can connect to this server and execute arbitrary commands on the target system. Assigned … Read more