PT-2024-5517 · Microsoft · Visual Studio Code

Published 2024-02-15 · Updated 2025-07-07 · CVE-2024-1569

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions parisneo/lollms-webui (affected versions not specified)

Description The issue is related to uncontrolled resource consumption, allowing attackers to exploit the "/open code in vs code" and similar endpoints without authentication by sending repeated HTTP POST requests. This can lead to the opening of Visual Studio Code or the default folder opener multiple times, exhausting system resources and rendering the host machine unusable.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

BDU:2024-06166

CVE-2024-1569

Affected Products

Visual Studio Code

References · 9

• 🔥 https://huntr.com/bounties/369d1694-47e4-49bc-bb35-931ce4a5148e · Exploit
• https://github.com/parisneo/lollms-webui/commit/354cf766835396b7fc0d5105ed3b77572a653149 · Patch
• https://osv.dev/vulnerability/CVE-2024-1569 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-06166 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-1569 · Security Note
• https://twitter.com/VulmonFeeds/status/1780113296558895536 · Twitter Post
• https://twitter.com/CVEnew/status/1780039204967497783 · Twitter Post
• https://vuldb.com/?id.260842 · Note
• https://t.me/cvenotify/127850 · Telegram Post