~ / search / GHSA-g5vf-38cp-4px9

GHSA-g5vf-38cp-4px9

.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2020-1147

Packages

EcosystemPackageAffectedFixed in
NuGet Microsoft.NETCore.App >= 2.1.0, < 2.1.20 2.1.20
NuGet Microsoft.NETCore.App.Runtime.linux-arm >= 3.1.0, < 3.1.6 3.1.6
NuGet Microsoft.NETCore.App.Runtime.linux-arm64 >= 3.1.0, < 3.1.6 3.1.6
NuGet Microsoft.NETCore.App.Runtime.linux-musl-arm64 >= 3.1.0, < 3.1.6 3.1.6
NuGet Microsoft.NETCore.App.Runtime.linux-musl-x64 >= 3.1.0, < 3.1.6 3.1.6
NuGet Microsoft.NETCore.App.Runtime.linux-x64 >= 3.1.0, < 3.1.6 3.1.6
NuGet Microsoft.NETCore.App.Runtime.osx-x64 >= 3.1.0, < 3.1.6 3.1.6
NuGet Microsoft.NETCore.App.Runtime.rhel.6-x64 >= 3.1.0, < 3.1.6 3.1.6
NuGet Microsoft.NETCore.App.Runtime.win-arm >= 3.1.0, < 3.1.6 3.1.6
NuGet Microsoft.NETCore.App.Runtime.win-arm64 >= 3.1.0, < 3.1.6 3.1.6
NuGet Microsoft.NETCore.App.Runtime.win-x64 >= 3.1.0, < 3.1.6 3.1.6
NuGet Microsoft.NETCore.App.Runtime.win-x86 >= 3.1.0, < 3.1.6 3.1.6

Details

As written in the advisory (Markdown source, shown as plain text).

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.

References

External links from the advisory. They lead to third-party sites.