References https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20656 https://nvd.nist.gov/vuln/detail/CVE-2024-20656 https://www.mdsec.co.uk/2024/01/cve-2024-20656-local-privilege-escalation-in-vsstandardcollectorservice150-service/ https://avd.aliyun.com/detail?id=AVD-2024-20656 https://www.ddpoc.com/DVB-2024-8673.html https://www.ctfiot.com/157643.html https://www.cnvd.org.cn/flaw/show/CNVD-2024-11163 https://learn.microsoft.com/zh-cn/visualstudio/releases/2022/release-notes-v17.8 https://github.com/Wh04m1001/CVE-2024-20656 https://www.sentinelone.com/vulnerability-database/cve-2024-20656/
Related Vulnerabilities北京中科聚网一体化运营平台 /manage/tplresource/importVisualModuleImg 文件上传漏洞时空智友ERP系统 /formservice updater.uploadStudioFile 文件上传漏洞PoCCVE-2025-25296: Label Studio < 1.16.0 - Cross-Site ScriptingPoCCVE-2025-47783: Label Studio < 1.18.0 - Reflected XSSLabel Studio存在XSS漏洞(CVE-2025-25296)PoCsupabase-studio-exposure: Supabase Studio - ExposurePoCCVE-2024-14015: Studiocart <= 2.9.0 - Cross-Site ScriptingPoCvscode-settings: Visual Studio Code Settings - Credential ExposurePoCvscode-mcp-json: Visual Studio Code MCP Configuration ("mcp.json") ExposurePoCvscode-slnx-sqlite-disclosure: Visual Studio Code - Slnx.SQLite File DisclosureCherry Studio 未授权 代码注入漏洞Sim Studio AI 服务端请求伪造漏洞(CVE-2025-9805)