Lucene search
Veracode Vulnerability DatabaseVERACODE:40925HistoryJun 16, 2023 - 8:31 a.m.
Remote Code Execution (RCE)
2023-06-1608:31:49
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16
nuget
vulnerable
remote code execution
symlink
race condition
software
CVSS3
7.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
EPSS
0.01
Percentile
83.8%
NuGet is vulnerable to Remote Code Execution (RCE). The vulnerability is caused by an attacker creating a symlink to the nuget command, which can lead Remote Code Execution if a race condition is won.
Related
prion
prion
Remote code execution
2023-06-14 15:15:00
redhatcve
redhatcve
CVE-2023-29337
2023-06-14 05:49:12
ubuntucve
ubuntucve
CVE-2023-29337
2023-06-13 00:00:00
alpinelinux
alpinelinux
CVE-2023-29337
2023-06-14 15:15:09
vulnrichment
vulnrichment
CVE-2023-29337 NuGet Client Remote Code Execution Vulnerability
2023-06-14 14:52:20
debiancve
debiancve
CVE-2023-29337
2023-06-14 15:15:09
osv
osv
NuGet Client Remote Code Execution Vulnerability
2023-06-14 16:44:21
Important: .NET 6.0 security, bug fix, and enhancement update
2023-06-14 00:00:00
Important: .NET 6.0 security, bug fix, and enhancement update
2023-08-31 16:54:34
cve
cve
CVE-2023-29337
2023-06-14 15:15:09
mscve
mscve
NuGet Client Remote Code Execution Vulnerability
2023-06-13 07:00:00
nvd
nvd
CVE-2023-29337
2023-06-14 15:15:09
github
github
NuGet Client Remote Code Execution Vulnerability
2023-06-14 16:44:21
cvelist
cvelist
CVE-2023-29337 NuGet Client Remote Code Execution Vulnerability
2023-06-14 14:52:20
ibm
ibm
redhat
redhat
(RHSA-2023:4449) Important: .NET 6.0 security update
2023-08-03 07:44:58
almalinux
almalinux
Important: .NET 6.0 security, bug fix, and enhancement update
2023-06-14 00:00:00
Important: .NET 6.0 security, bug fix, and enhancement update
2023-06-14 00:00:00
Important: .NET 7.0 security, bug fix, and enhancement update
2023-06-14 00:00:00
nessus
nessus
RHEL 9 : .NET 6.0 (RHSA-2023:4449)
2023-08-03 00:00:00
RHEL 8 : .NET 6.0 (RHSA-2023:4448)
2023-08-03 00:00:00
RHEL 8 : .NET 6.0 (RHSA-2023:3582)
2023-06-14 00:00:00
oraclelinux
oraclelinux
.NET 6.0 security, bug fix, and enhancement update
2023-06-15 00:00:00
.NET 6.0 security, bug fix, and enhancement update
2023-06-16 00:00:00
.NET 7.0 security, bug fix, and enhancement update
2023-06-17 00:00:00
rocky
rocky
.NET 6.0 security, bug fix, and enhancement update
2023-08-31 16:54:34
.NET 7.0 security, bug fix, and enhancement update
2023-08-31 16:54:34
openvas
openvas
Ubuntu: Security Advisory (USN-6161-2)
2023-06-26 00:00:00
Ubuntu: Security Advisory (USN-6161-1)
2023-06-14 00:00:00
ubuntu
ubuntu
.NET vulnerabilities
2023-06-13 00:00:00
.NET regression
2023-06-23 00:00:00
kaspersky
kaspersky
KLA50317 Multiple vulnerabilities in Microsoft Developer Tools
2023-06-13 00:00:00
rapid7blog
rapid7blog
Patch Tuesday - June 2023
2023-06-13 20:49:27
CVSS3
7.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
EPSS
0.01
Percentile
83.8%
Related for VERACODE:40925