GitHub Advisoryadvisory · NuGet

GHSA-x5qj-9vmx-7g6g Improper Input Validation in .Net Framework API's

MEDIUM Published 2022-05-14 Modified 2022-07-08 Official page ↗
Aliases
CVE-2019-0657
Ecosystem
NuGet
Packages
Microsoft.NETCore.App, System.Private.Uri
Severity
Moderate
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-20
Reviewed
2022-07-08

Affected packages

• NuGet Microsoft.NETCore.App: >= 2.2.0, < 2.2.2 → fixed in 2.2.2 • NuGet Microsoft.NETCore.App: >= 2.1.0, < 2.1.8 → fixed in 2.1.8 • NuGet System.Private.Uri: >= 4.3.0, < 4.3.2 → fixed in 4.3.2

Description

A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability'.

Related

Alias · CVE (1)

  • CVE-2019-0657 A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio… vulnerability

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References