CVE-2019-0757
At a glance Severity Not available EPSS EPSS 2.70 % · percentile 86 (2026-10-27) State PUBLISHED Published 2019-04-09 Updated 2024-08-04 Assigner microsoft NVD status Modified Description A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify a NuGet package's folder structure, aka 'NuGet Package Manager Tampering Vulnerability'.
Scores Version Score Vector Scored by CVSS 3.1 MEDIUM 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N NVD · nvd@nist.gov (Primary) CVSS 2.0 MEDIUM 4.0 AV:N/AC:L/Au:S/C:N/I:P/A:N NVD · nvd@nist.gov (Primary)
European references
CERT-FR advisories
Affected configurations (NVD CPE) cpe:2.3:a:microsoft:visual_studio_2017:-:*:*:*:*:*:*:*cpe:2.3:a:microsoft:nuget:4.3.1:*:*:*:*:*:*:*cpe:2.3:a:microsoft:nuget:4.4.2:*:*:*:*:*:*:*cpe:2.3:a:microsoft:nuget:4.5.2:*:*:*:*:*:*:*cpe:2.3:a:microsoft:nuget:4.6.3:*:*:*:*:*:*:*cpe:2.3:a:microsoft:nuget:4.7.2:*:*:*:*:*:*:*cpe:2.3:a:microsoft:nuget:4.8.2:*:*:*:*:*:*:*cpe:2.3:a:microsoft:nuget:4.9.4:*:*:*:*:*:*:*cpe:2.3:a:mono-project:mono_framework:5.18.0.223:*:*:*:*:*:*:*cpe:2.3:a:mono-project:mono_framework:5.20.0:*:*:*:*:*:*:*cpe:2.3:a:microsoft:.net_core_sdk:1.1:*:*:*:*:*:*:*cpe:2.3:a:microsoft:.net_core_sdk:2.1.500:*:*:*:*:*:*:*cpe:2.3:a:microsoft:.net_core_sdk:2.2.100:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*Affected products
References
Sources
