CVE-2019-1486

Name of the Vulnerable Software and Affected Versions Visual Studio Live Share (affected versions not specified)

Description A spoofing issue exists in Visual Studio Live Share, where a guest connected to a Live Share session can be redirected to an arbitrary URL specified by the session host. This is related to security setting errors in the Live Share extension of Microsoft Visual Studio. Exploitation of this issue may allow a remote attacker to redirect a user to a malicious URL by convincing them to connect to a specially crafted Live Share session.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.