cbcvebase.

Sourcegraph Cody vulnerabilities

1 known vulnerability affecting sourcegraph/cody.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2023-46248P2HIGHCVSS 8.8≥ 0.10.0, ≤ 0.14.0v>= 0.10.0, < 0.14.12023-10-31
CVE-2023-46248 [HIGH] CWE-15 CVE-2023-46248: Cody is an artificial intelligence (AI) coding assistant. The Cody AI VSCode extension versions 0.10 Cody is an artificial intelligence (AI) coding assistant. The Cody AI VSCode extension versions 0.10.0 through 0.14.0 are vulnerable to Remote Code Execution under certain conditions. An attacker in control of a malicious repository could modify the Cody configuration file `.vscode/cody.json` and overwrite Cody commands. If a user with the extension in
nvd
Sourcegraph Cody vulnerabilities | cvebase