A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify a NuGet package's folder structure, aka 'NuGet Package Manager Tampering Vulnerability'.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade dotnet-hostUpgrade dotnet-runtime-2.1Upgrade dotnet-sdk-2.1.5xxUpgrade dotnetUpgrade dotnet-runtime-2.1-debuginfoUpgrade dotnet-host-fxr-2.1Upgrade dotnet-debuginfoUpgrade dotnet-host-debuginfoUpgrade dotnet-debugsourceUpgrade dotnet-sdk-2.1Upgrade dotnet-host-fxr-2.1-debuginfoUpgrade dotnet-sdk-2.1.5xx-debuginfo | Aug 28, 2019 | Apr 9, 2019 |
| Oracle_linux | — | Upgrade dotnet-host-fxr-2.1Upgrade dotnet-runtime-2.1Upgrade dotnetUpgrade dotnet-sdk-2.1.5xxUpgrade dotnet-hostUpgrade dotnet-sdk-2.1 | Jul 22, 2024 | Mar 12, 2019 |
| Redhat_linux | — | Upgrade dotnet-debugsourceUpgrade dotnet-sdk-2.1.5xx-debuginfoUpgrade dotnet-host-fxr-2.1-debuginfoUpgrade dotnet-hostUpgrade dotnet-runtime-2.1Upgrade dotnet-sdk-2.1Upgrade dotnet-runtime-2.1-debuginfoUpgrade dotnet-debuginfoUpgrade dotnet-host-debuginfoUpgrade dotnet-sdk-2.1.5xxUpgrade dotnetUpgrade dotnet-host-fxr-2.1 | May 23, 2019 | Apr 9, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Apr 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub