Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2019-0757

A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify a NuGet package's folder structure, aka 'NuGet

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
microsoft

Description

A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify a NuGet package's folder structure, aka 'NuGet Package Manager Tampering Vulnerability'.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microsoft Microsoft Visual Studio

  • 2017 for Macaffected

Microsoft .NET Core SDK

  • 1.1 on .NET Core 1.0affected
  • 2.1.500 on .NET Core 2.1affected
  • 2.2.100 on .NET Core 2.2affected
  • 1.1 on .NET Core 1.1affected

Microsoft Nuget

  • 4.3.1affected
  • 4.4.2affected
  • 4.5.2affected
  • 4.6.3affected
  • 4.7.2affected
  • 4.8.2affected
  • 4.9.4affected

Microsoft Mono Framework

  • 5.18.0.223affected
  • 5.20.0affected

References