Remote Code Execution (RCE)

2023-06-1608:31:49

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

nuget

vulnerable

remote code execution

symlink

race condition

software

7.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

0.01 Low

EPSS

Percentile

83.8%

JSON

NuGet is vulnerable to Remote Code Execution (RCE). The vulnerability is caused by an attacker creating a symlink to the nuget command, which can lead Remote Code Execution if a race condition is won.

CPENameOperatorVersion
microsoft.build.nugetsdkresolverle5.11.0-rc.10
nuget.commandlineeq6.5.0
nuget.commandlinele6.0.3-rc.1
nuget.commandlinele6.4.1
nuget.commandlinele6.3.2
nuget.commandlinele6.2.2
nuget.commandseq6.5.0
nuget.commandseq6.4.0
nuget.commandsle6.0.3-rc.1
nuget.commandsle6.3.1

Name	Operator	Version
microsoft.build.nugetsdkresolver	le	5.11.0-rc.10
nuget.commandline	eq	6.5.0
nuget.commandline	le	6.0.3-rc.1
nuget.commandline	le	6.4.1
nuget.commandline	le	6.3.2
nuget.commandline	le	6.2.2
nuget.commands	eq	6.5.0
nuget.commands	eq	6.4.0
nuget.commands	le	6.0.3-rc.1
nuget.commands	le	6.3.1