GHSA-jw42-5m4v-9c8g

Source

https://github.com/advisories/GHSA-jw42-5m4v-9c8g

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/01/GHSA-jw42-5m4v-9c8g/GHSA-jw42-5m4v-9c8g.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-jw42-5m4v-9c8g

Withdrawn

2024-02-13T21:18:01Z

Published

2024-01-09T18:30:27Z

Modified

2024-05-31T20:38:23Z

Severity

9.1 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CVSS Calculator

Summary

Duplicate Advisory: NuGet Client Security Feature Bypass Vulnerability

Details

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-68w7-72jg-6qpp. This link is maintained to preserve external references.

Original Description

NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability

Database specific

{
    "cwe_ids":  [
        "CWE-20"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2024-02-13T21:18:01Z",
    "nvd_published_at":  "2024-01-09T18:15:46Z",
    "severity":  "CRITICAL"
}

References

Affected packages

NuGet / NuGet.CommandLine

Package

Name: NuGet.CommandLine; View open source insights on deps.dev
Purl: pkg:nuget/NuGet.CommandLine

Affected ranges

Type: ECOSYSTEM
Events: Introduced

6.8.0

Fixed

6.8.1

Affected versions

6.*

6.8.0

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/01/GHSA-jw42-5m4v-9c8g/GHSA-jw42-5m4v-9c8g.json"