CVE-2023-33126

HIGH7.3EPSS 0.87%

.NET and Visual Studio Remote Code Execution Vulnerability

發布日:2023/6/14修改日:2025/5/20

也稱為:GHSA-gh24-9qjj-mr67BIT-dotnet-2023-33126BIT-dotnet-sdk-2023-33126

描述

.NET and Visual Studio Remote Code Execution Vulnerability

受影響套件(6)

Bitnami/dotnet>= 6.0.0, < 6.0.18, >= 7.0.0, < 7.0.7
Bitnami/dotnet-sdk>= 6.0.0, < 6.0.18, >= 7.0.0, < 7.0.7
NuGet/Microsoft.NetCore.App.Runtime.win-arm>= 7.0.0, < 7.0.7
NuGet/Microsoft.NetCore.App.Runtime.win-arm64>= 7.0.0, < 7.0.7
NuGet/Microsoft.NetCore.App.Runtime.win-x64>= 7.0.0, < 7.0.7
NuGet/Microsoft.NetCore.App.Runtime.win-x86>= 6.0.0, < 6.0.18

CVSS 分數

來源	版本	嚴重程度	向量
osv	CVSS 3.1	HIGH7.3	CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

參考連結(5)