description: A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify a NuGet package's folder structure, aka 'NuGet Package Manager Tampering Vulnerability'.
problem types: Tampering
affected:
{
product: Microsoft Visual Studio
vendor: Microsoft
versions:
status: affected, version: 2017 for Mac
}
{
product: .NET Core SDK
vendor: Microsoft
versions:
status: affected, version: 1.1 on .NET Core 1.0
status: affected, version: 2.1.500 on .NET Core 2.1
status: affected, version: 2.2.100 on .NET Core 2.2
status: affected, version: 1.1 on .NET Core 1.1
}
{
product: Nuget
vendor: Microsoft
versions:
status: affected, version: 4.3.1
status: affected, version: 4.4.2
status: affected, version: 4.5.2
status: affected, version: 4.6.3
status: affected, version: 4.7.2
status: affected, version: 4.8.2
status: affected, version: 4.9.4
}
{
product: Mono Framework
vendor: Microsoft
versions:
status: affected, version: 5.18.0.223
status: affected, version: 5.20.0
}
