CVE-2020-1340

2020-06-0920:15:21

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.4%

JSON

A spoofing vulnerability exists when the NuGetGallery does not properly sanitize input on package metadata values, aka ‘NuGetGallery Spoofing Vulnerability’.

CPENameOperatorVersion
nugetgalleryeq3.0.554-r-master-NuGet
nugetgalleryeqiters/zold/Dec03@1624
nugetgalleryeq3.0.570-r-master-NuGet
nugetgalleryeqiters/zold/2013Jul19
nugetgalleryeqiters/zold/2013Mar06@1412
nugetgalleryeqiters/zold/Jan22@1653
nugetgalleryeq2018.05.08
nugetgalleryeq2017.04.28
nugetgalleryeq2018.11.06
nugetgalleryeq3.0.621-r-master-ApiApps

Name	Operator	Version
nugetgallery	eq	3.0.554-r-master-NuGet
nugetgallery	eq	iters/zold/Dec03@1624
nugetgallery	eq	3.0.570-r-master-NuGet
nugetgallery	eq	iters/zold/2013Jul19
nugetgallery	eq	iters/zold/2013Mar06@1412
nugetgallery	eq	iters/zold/Jan22@1653
nugetgallery	eq	2018.05.08
nugetgallery	eq	2017.04.28
nugetgallery	eq	2018.11.06
nugetgallery	eq	3.0.621-r-master-ApiApps