Medium severity5.4NVD Advisory· Published Jun 9, 2020· Updated Jun 17, 2026
CVE-2020-1340
CVE-2020-1340
Description
A spoofing vulnerability exists when the NuGetGallery does not properly sanitize input on package metadata values, aka 'NuGetGallery Spoofing Vulnerability'.
Affected products
3cpe:2.3:a:microsoft:nugetgallery:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:microsoft:nugetgallery:*:*:*:*:*:*:*:*range: <2020.06.09
- (no CPE)
- (no CPE)range: unspecified
Patches
Vulnerability mechanics
References
1- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1340nvdPatchVendor Advisory
News mentions
0No linked articles in our index yet.