{"action":"Upgrade Microsoft.Rest.ClientRuntime to 2.3.24 or later.","affected":[{"fixed":"2.3.24","introduced":"0"}],"component":"Microsoft.Rest.ClientRuntime","cve_ids":["CVE-2022-26907"],"ecosystem":"NuGet","epss":0.0236,"exploited":false,"fixed_versions":["2.3.24"],"ghsa_id":"GHSA-whph-446h-6m9v","id":"tcs_01M5N93Z87VBV1RTPG4YC71G33","modified_at":"2024-02-16T08:21:14.568681Z","published_at":"2022-04-16T00:00:28Z","references":["https://osv.dev/vulnerability/GHSA-whph-446h-6m9v","https://nvd.nist.gov/vuln/detail/CVE-2022-26907","https://github.com/Azure/azure-sdk-for-net/pull/28169","https://github.com/Azure/azure-sdk-for-net/commit/e67f2a9fc5aa1060bd465d1458c347671268f6f5","https://github.com/Azure/azure-sdk-for-net","https://github.com/Azure/azure-sdk-for-net/blob/a919c48ae294fed084a9679b6f53ac6af3fb4c3a/sdk/mgmtcommon/ClientRuntime/ClientRuntime/Microsoft.Rest.ClientRuntime.csproj#L11","https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26907","https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26907"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-whph-446h-6m9v","url":"https://osv.dev/vulnerability/GHSA-whph-446h-6m9v"}],"summary":"Azure SDK for .NET Information Disclosure Vulnerability."}