{"action":"Upgrade DSInternals.Common to 4.8 or later.","affected":[{"fixed":"4.8","introduced":"2.21"}],"component":"DSInternals.Common","cve_ids":[],"ecosystem":"NuGet","exploited":false,"fixed_versions":["4.8"],"ghsa_id":"GHSA-vx2x-9cff-fhjw","id":"tcs_01M5N92VH72PVJ1GNRF4935S4H","modified_at":"2024-12-03T06:08:14.546218Z","published_at":"2022-12-06T21:13:49Z","references":["https://osv.dev/vulnerability/GHSA-vx2x-9cff-fhjw","https://github.com/MichaelGrafnetter/DSInternals/security/advisories/GHSA-vx2x-9cff-fhjw","https://nvd.nist.gov/vuln/detail/CVE-2022-30170","https://github.com/MichaelGrafnetter/DSInternals","https://www.mandiant.com/resources/blog/apt29-windows-credential-roaming"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-vx2x-9cff-fhjw","url":"https://osv.dev/vulnerability/GHSA-vx2x-9cff-fhjw"}],"summary":"DSInternals Credential Roaming Elevation of Privilege Vulnerability"}