CVE-2022-41032
HIGH7.8EPSS 19.5%NuGet Client Elevation of Privilege Vulnerability
Published: 10/11/2022Modified: 5/20/2025
Description
NuGet Client Elevation of Privilege Vulnerability
Affected packages (5)
- Bitnami/dotnet>= 6.0.0, < 6.0.1
- Bitnami/dotnet-sdk>= 6.0.0, < 6.0.1
- NuGet/NuGet.CommandLine>= 4.6.0, < 4.9.6
- NuGet/NuGet.Commands>= 4.6.0, < 4.9.6
- NuGet/NuGet.Protocol>= 4.6.0, < 4.9.6
CVSS scores
| Source | Version | Severity | Vector |
|---|---|---|---|
| osv | CVSS 3.1 | HIGH7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
References (17)
- ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2022-41032
- PATCHhttps://github.com/NuGet/NuGet.Client
- WEBhttps://github.com/NuGet/Announcements/issues/65
- WEBhttps://github.com/NuGet/NuGet.Client/commit/6392863cf83f4870e18f1d02f2463cca633e59ed
- WEBhttps://github.com/NuGet/NuGet.Client/security/advisories/GHSA-g3q9-xf95-8hp5
- WEBhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FOG35Z5RL5W5RGLLYLN46CI4D2UPDSWM
- WEBhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FOG35Z5RL5W5RGLLYLN46CI4D2UPDSWM/
- WEBhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HDPT2MJC3HD7HYZGASOOX6MTDR4ASBL5
- WEBhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HDPT2MJC3HD7HYZGASOOX6MTDR4ASBL5/
- WEBhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X7BMHO5ITRBZREVTEKHQRGSFRPDMALV3
- WEBhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X7BMHO5ITRBZREVTEKHQRGSFRPDMALV3/
- WEBhttps://lists.fedoraproject.org/archives/list/[email protected]/message/FOG35Z5RL5W5RGLLYLN46CI4D2UPDSWM
- WEBhttps://lists.fedoraproject.org/archives/list/[email protected]/message/HDPT2MJC3HD7HYZGASOOX6MTDR4ASBL5
- WEBhttps://lists.fedoraproject.org/archives/list/[email protected]/message/X7BMHO5ITRBZREVTEKHQRGSFRPDMALV3
- WEBhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41032
- WEBhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-41032
- WEBhttps://www.edwardthomson.com/blog/my-first-cve.html