VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Apr 9, 2019· Updated Jun 17, 2026

CVE-2019-0757

CVE-2019-0757

Description

A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify a NuGet package's folder structure, aka 'NuGet Package Manager Tampering Vulnerability'.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

26
  • Microsoft/.net Core SDK3 versions
    cpe:2.3:a:microsoft:.net_core_sdk:1.1:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:microsoft:.net_core_sdk:1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_core_sdk:2.1.500:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_core_sdk:2.2.100:*:*:*:*:*:*:*
  • Microsoft/Nuget7 versions
    cpe:2.3:a:microsoft:nuget:4.3.1:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:microsoft:nuget:4.3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:nuget:4.4.2:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:nuget:4.5.2:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:nuget:4.6.3:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:nuget:4.7.2:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:nuget:4.8.2:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:nuget:4.9.4:*:*:*:*:*:*:*
  • Microsoft/Visual Studio 2017
    cpe:2.3:a:microsoft:visual_studio_2017:-:*:*:*:*:*:*:*
  • Mono/Mono Framework2 versions
    cpe:2.3:a:mono-project:mono_framework:5.18.0.223:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:mono-project:mono_framework:5.18.0.223:*:*:*:*:*:*:*
    • cpe:2.3:a:mono-project:mono_framework:5.20.0:*:*:*:*:*:*:*
  • Red Hat/Enterprise Linux Server
    cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
  • Red Hat/Enterprise Linux Eus3 versions
    cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*
  • Red Hat/Enterprise Linux Server Aus2 versions
    cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*
  • Red Hat/Enterprise Linux Server Tus2 versions
    cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*
  • Microsoft/NuGet Package Managerllm-fuzzy
  • Microsoft/.NET Core SDKv5
    Range: 1.1 on .NET Core 1.0
  • Microsoft/Visual Studiocpe-rescue
    Range: 2017 for Mac
  • Microsoft/Mono Frameworkv5
    Range: 5.18.0.223
  • Microsoft/Nugetv5
    Range: 4.3.1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.