Privilege Escalation

2022-10-1302:11:26

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.0005 Low

EPSS

Percentile

18.9%

JSON

NuGet Client is vulnerable to Privilege Escalation. The vulnerability exists because the library does not properly handle a world-writable cache directory, allowing an attacker to inject and execute malicious code, resulting in the elevation of privilege.

CPENameOperatorVersion
nuget.commandlineeq6.3.0
nuget.commandlinele4.9.5
nuget.commandlinele6.2.1
nuget.commandlinele6.0.2
nuget.commandlinele5.7.2
nuget.commandlinele5.9.2
nuget.commandlinele5.11.2
nuget.commandseq6.3.0
nuget.commandsle4.9.5
nuget.commandsle6.2.1

Name	Operator	Version
nuget.commandline	eq	6.3.0
nuget.commandline	le	4.9.5
nuget.commandline	le	6.2.1
nuget.commandline	le	6.0.2
nuget.commandline	le	5.7.2
nuget.commandline	le	5.9.2
nuget.commandline	le	5.11.2
nuget.commands	eq	6.3.0
nuget.commands	le	4.9.5
nuget.commands	le	6.2.1