CVE-2019-0976

Description

A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify contents of the intermediate build folder (by default obj), aka NuGet Package Manager Tampering Vulnerability.

Risk Information

Base Score

5.5

MODERATE

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS Score

Exploitation Probability

0.274

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2019-0976 are fixed in Nuget - NuGet.Commands 5.0.2	Windows
Vulnerabilities CVE-2019-0976 are fixed in Nuget - NuGet.Commands for Linux 5.0.2	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234