CVE-2019-0757

Description

A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify a NuGet packages folder structure, aka NuGet Package Manager Tampering Vulnerability.

Risk Information

Base Score

6.5

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS Score

Exploitation Probability

5.388

Associated Vulnerability

Vulnerability	OS Platform
Multiple Vulnerabilities are affected in Microsoft Visual Studio Enterprise 2017 -	Windows
Multiple Vulnerabilities are affected in Microsoft Visual Studio Professional 2017 -	Windows
(RHSA-2019:1259) dotnet security, bug fix, and enhancement update dotnet-2.1.507-2.el8_0.x86_64.rpm	Linux
(RHSA-2019:1259) dotnet security, bug fix, and enhancement update dotnet-debugsource-2.1.507-2.el8_0.x86_64.rpm	Linux
(RHSA-2019:1259) dotnet security, bug fix, and enhancement update dotnet-host-2.1.11-2.el8_0.x86_64.rpm	Linux
(RHSA-2019:1259) dotnet security, bug fix, and enhancement update dotnet-host-fxr-2.1-2.1.11-2.el8_0.x86_64.rpm	Linux
(RHSA-2019:1259) dotnet security, bug fix, and enhancement update dotnet-runtime-2.1-2.1.11-2.el8_0.x86_64.rpm	Linux
(RHSA-2019:1259) dotnet security, bug fix, and enhancement update dotnet-sdk-2.1-2.1.507-2.el8_0.x86_64.rpm	Linux
(RHSA-2019:1259) dotnet security, bug fix, and enhancement update dotnet-sdk-2.1.5xx-2.1.507-2.el8_0.x86_64.rpm	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234