Vulnerability Details CVE-2019-0757
A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify a NuGet package's folder structure, aka 'NuGet Package Manager Tampering Vulnerability'.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.086
EPSS Ranking 91.9%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 4.0
References
Products affected by CVE-2019-0757
-
cpe:2.3:a:microsoft:.net_core:1.0
-
cpe:2.3:a:microsoft:.net_core:1.1
-
cpe:2.3:a:microsoft:.net_core:2.1
-
cpe:2.3:a:microsoft:.net_core:2.2
-
cpe:2.3:a:microsoft:.net_core_sdk:1.1
-
cpe:2.3:a:microsoft:.net_core_sdk:2.1.500
-
cpe:2.3:a:microsoft:.net_core_sdk:2.2.100
-
cpe:2.3:a:microsoft:nuget:4.3.1
-
cpe:2.3:a:microsoft:nuget:4.4.2
-
cpe:2.3:a:microsoft:nuget:4.5.2
-
cpe:2.3:a:microsoft:nuget:4.6.3
-
cpe:2.3:a:microsoft:nuget:4.7.2
-
cpe:2.3:a:microsoft:nuget:4.8.2
-
cpe:2.3:a:microsoft:nuget:4.9.4
-
cpe:2.3:a:microsoft:visual_studio_2017:-
-
cpe:2.3:a:mono-project:mono_framework:5.18.0.223
-
cpe:2.3:a:mono-project:mono_framework:5.20.0
-
cpe:2.3:o:apple:macos:-
-
cpe:2.3:o:redhat:enterprise_linux:8.0
-
cpe:2.3:o:redhat:enterprise_linux_eus:8.1
-
cpe:2.3:o:redhat:enterprise_linux_eus:8.2
-
cpe:2.3:o:redhat:enterprise_linux_eus:8.4
-
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2
-
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4
-
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2
-
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4