What is GHSA-x5qj-9vmx-7g6g?

GHSA-x5qj-9vmx-7g6g is a security advisory published by GitHub Security Advisories with Medium severity. Improper Input Validation in .Net Framework API's

Which CVE IDs does GHSA-x5qj-9vmx-7g6g cover?

GHSA-x5qj-9vmx-7g6g covers the following CVE IDs: CVE-2019-0657. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-x5qj-9vmx-7g6g?

GHSA-x5qj-9vmx-7g6g has a CVSS v3 base score of 5.9, published by GitHub Security Advisories.

Which products are affected by GHSA-x5qj-9vmx-7g6g?

GHSA-x5qj-9vmx-7g6g affects 3 products, including: nuget/Microsoft.NETCore.App:\u003e= 2.2.0, \u003c 2.2.2; nuget/Microsoft.NETCore.App:\u003e= 2.1.0, \u003c 2.1.8; nuget/System.Private.Uri:\u003e= 4.3.0, \u003c 4.3.2.

GHSA-x5qj-9vmx-7g6gMediumCVSS 5.9

Improper Input Validation in .Net Framework API's

Vendor

GitHub Security Advisories

Published

May 14, 2022

Last Modified

January 27, 2023

🔗 CVE IDs covered (1)

CVE-2019-0657 →

📋 Description

A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability'.

🎯 Affected products3

nuget/Microsoft.NETCore.App:>= 2.2.0, < 2.2.2
nuget/Microsoft.NETCore.App:>= 2.1.0, < 2.1.8
nuget/System.Private.Uri:>= 4.3.0, < 4.3.2

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2019-0657
https://access.redhat.com/errata/RHSA-2019:0349
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0657
http://www.securityfocus.com/bid/106890
https://github.com/dotnet/announcements/issues/97
https://github.com/github/advisory-database/issues/302
https://github.com/advisories/GHSA-x5qj-9vmx-7g6g