CVE-2020-1343

CVE-2020-1343 describes an information disclosure vulnerability in the Microsoft Visual Studio Code Live Share Extension. This flaw allows sensitive tokens to be exposed in plain text, potentially compromising user data. With a CVSS score of 5.9 (Medium), this vulnerability has a network attack vector and low attack complexity, enabling an unauthenticated attacker to achieve high confidentiality impact without user interaction. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in CISA's KEV catalog, though it received limited community discussion and media coverage at the time of disclosure.