CVE-2022-41032
3 advisories.
NuGet/NuGet.Commands CVE-2022-41032: high 7.8
NuGet Elevation of Privilege Vulnerability
Action: Upgrade NuGet.Commands to 4.9.6 (4.9.x), 5.7.3 (5.7.x), 5.9.3 (5.9.x), 5.11.3 (5.11.x), 6.0.3 (6.0.x), 6.2.2 (6.2.x) or 6.3.1 (6.3.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.6.0 | 4.9.6 | - |
| 5.0.0 | 5.7.3 | - |
| 5.8.0 | 5.9.3 | - |
| 5.10.0 | 5.11.3 | - |
| 6.0.0 | 6.0.3 | - |
| 6.1.0 | 6.2.2 | - |
| 6.3.0 | 6.3.1 | - |
Fixed versions
| 4.9.6 | 5.7.3 | 5.9.3 | 5.11.3 | 6.0.3 | 6.2.2 | 6.3.1 |
Sources
- osv: GHSA-g3q9-xf95-8hp5
- https://github.com/NuGet/NuGet.Client/security/advisories/GHSA-g3q9-xf95-8hp5
- https://nvd.nist.gov/vuln/detail/CVE-2022-41032
- https://github.com/NuGet/Announcements/issues/65
- https://github.com/NuGet/NuGet.Client/commit/6392863cf83f4870e18f1d02f2463cca633e59ed
- https://github.com/NuGet/NuGet.Client
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FOG35Z5RL5W5RGLLYLN46CI4D2UPDSWM
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HDPT2MJC3HD7HYZGASOOX6MTDR4ASBL5
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X7BMHO5ITRBZREVTEKHQRGSFRPDMALV3
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FOG35Z5RL5W5RGLLYLN46CI4D2UPDSWM
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HDPT2MJC3HD7HYZGASOOX6MTDR4ASBL5
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X7BMHO5ITRBZREVTEKHQRGSFRPDMALV3
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41032
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-41032
- https://www.edwardthomson.com/blog/my-first-cve.html
CVE-2022-41032 · published · modified · JSON
NuGet/NuGet.CommandLine CVE-2022-41032: high 7.8
NuGet Elevation of Privilege Vulnerability
Action: Upgrade NuGet.CommandLine to 4.9.6 (4.9.x), 5.7.3 (5.7.x), 5.9.3 (5.9.x), 5.11.3 (5.11.x), 6.0.3 (6.0.x), 6.2.2 (6.2.x) or 6.3.1 (6.3.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.6.0 | 4.9.6 | - |
| 5.0.0 | 5.7.3 | - |
| 5.8.0 | 5.9.3 | - |
| 5.10.0 | 5.11.3 | - |
| 6.0.0 | 6.0.3 | - |
| 6.1.0 | 6.2.2 | - |
| 6.3.0 | 6.3.1 | - |
Fixed versions
| 4.9.6 | 5.7.3 | 5.9.3 | 5.11.3 | 6.0.3 | 6.2.2 | 6.3.1 |
Sources
- osv: GHSA-g3q9-xf95-8hp5#NuGet/NuGet.CommandLine
- https://github.com/NuGet/NuGet.Client/security/advisories/GHSA-g3q9-xf95-8hp5
- https://nvd.nist.gov/vuln/detail/CVE-2022-41032
- https://github.com/NuGet/Announcements/issues/65
- https://github.com/NuGet/NuGet.Client/commit/6392863cf83f4870e18f1d02f2463cca633e59ed
- https://github.com/NuGet/NuGet.Client
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FOG35Z5RL5W5RGLLYLN46CI4D2UPDSWM
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HDPT2MJC3HD7HYZGASOOX6MTDR4ASBL5
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X7BMHO5ITRBZREVTEKHQRGSFRPDMALV3
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FOG35Z5RL5W5RGLLYLN46CI4D2UPDSWM
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HDPT2MJC3HD7HYZGASOOX6MTDR4ASBL5
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X7BMHO5ITRBZREVTEKHQRGSFRPDMALV3
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41032
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-41032
- https://www.edwardthomson.com/blog/my-first-cve.html
CVE-2022-41032 · published · modified · JSON
NuGet/NuGet.Protocol CVE-2022-41032: high 7.8
NuGet Elevation of Privilege Vulnerability
Action: Upgrade NuGet.Protocol to 4.9.6 (4.9.x), 5.7.3 (5.7.x), 5.9.3 (5.9.x), 5.11.3 (5.11.x), 6.0.3 (6.0.x), 6.2.2 (6.2.x) or 6.3.1 (6.3.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.6.0 | 4.9.6 | - |
| 5.0.0 | 5.7.3 | - |
| 5.8.0 | 5.9.3 | - |
| 5.10.0 | 5.11.3 | - |
| 6.0.0 | 6.0.3 | - |
| 6.1.0 | 6.2.2 | - |
| 6.3.0 | 6.3.1 | - |
Fixed versions
| 4.9.6 | 5.7.3 | 5.9.3 | 5.11.3 | 6.0.3 | 6.2.2 | 6.3.1 |
Sources
- osv: GHSA-g3q9-xf95-8hp5#NuGet/NuGet.Protocol
- https://github.com/NuGet/NuGet.Client/security/advisories/GHSA-g3q9-xf95-8hp5
- https://nvd.nist.gov/vuln/detail/CVE-2022-41032
- https://github.com/NuGet/Announcements/issues/65
- https://github.com/NuGet/NuGet.Client/commit/6392863cf83f4870e18f1d02f2463cca633e59ed
- https://github.com/NuGet/NuGet.Client
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FOG35Z5RL5W5RGLLYLN46CI4D2UPDSWM
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HDPT2MJC3HD7HYZGASOOX6MTDR4ASBL5
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X7BMHO5ITRBZREVTEKHQRGSFRPDMALV3
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FOG35Z5RL5W5RGLLYLN46CI4D2UPDSWM
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HDPT2MJC3HD7HYZGASOOX6MTDR4ASBL5
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X7BMHO5ITRBZREVTEKHQRGSFRPDMALV3
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41032
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-41032
- https://www.edwardthomson.com/blog/my-first-cve.html
CVE-2022-41032 · published · modified · JSON