Not rated
CVE-2019-0757 A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated…
Description
A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify a NuGet package's folder structure, aka 'NuGet Package Manager Tampering Vulnerability'.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Visual Studio | Versions not published | |
| .NET Core SDK | Versions not published | |
| Nuget | 4.9.4 | No fix stated |
| Nuget | 4.8.2 | No fix stated |
| Nuget | 4.7.2 | No fix stated |
| Nuget | 4.6.3 | No fix stated |
| Nuget | 4.5.2 | No fix stated |
| Nuget | 4.4.2 | No fix stated |
| Nuget | 4.3.1 | No fix stated |
Show the 2 other branches Hide the 2 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Mono Framework | 5.20.0 | No fix stated |
| Mono Framework | 5.18.0.223 | No fix stated |
References
- portal.msrc.microsoft.com portal.msrc.microsoft.com
- RHSA-2019:1259 access.redhat.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft Visual Studio
The 23 CVEs of Microsoft Visual Studio →
CVE-2020-1393
An elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard Collector Service fails to…
Not rated
CVE-2020-1293
An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles…
Not rated
CVE-2020-1278
An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles…
Not rated
CVE-2020-1257
An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles…
Not rated