A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify a NuGet package's folder structure, aka 'NuGet Package Manager Tampering Vulnerability'.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade dotnet-host-fxr-2.1-debuginfoUpgrade dotnet-host-debuginfoUpgrade dotnet-debugsourceUpgrade dotnet-sdk-2.1Upgrade dotnet-sdk-2.1.5xx-debuginfoUpgrade dotnet-runtime-2.1Upgrade dotnet-debuginfoUpgrade dotnet-runtime-2.1-debuginfoUpgrade dotnet-hostUpgrade dotnet-sdk-2.1.5xxUpgrade dotnet-host-fxr-2.1Upgrade dotnet | Aug 28, 2019 | Apr 9, 2019 |
| Oracle_linux | — | Upgrade dotnet-hostUpgrade dotnet-sdk-2.1.5xxUpgrade dotnet-host-fxr-2.1Upgrade dotnet-runtime-2.1Upgrade dotnetUpgrade dotnet-sdk-2.1 | Jul 22, 2024 | Mar 12, 2019 |
| Redhat_linux | — | Upgrade dotnet-sdk-2.1.5xx-debuginfoUpgrade dotnet-host-fxr-2.1-debuginfoUpgrade dotnet-debugsourceUpgrade dotnetUpgrade dotnet-runtime-2.1Upgrade dotnet-sdk-2.1.5xxUpgrade dotnet-hostUpgrade dotnet-host-fxr-2.1Upgrade dotnet-runtime-2.1-debuginfoUpgrade dotnet-debuginfoUpgrade dotnet-host-debuginfoUpgrade dotnet-sdk-2.1 | May 23, 2019 | Apr 9, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Apr 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub