FLAT-CWJTT – Vulnerability | Fluid Attacks Database

Database

Description

.NET and Visual Studio Information Disclosure Vulnerability

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
nuget	nuget.commandline.xplat	>=3.5.0 <4.9.5 \|\| >=5.0.0 <5.2.1 \|\| >=5.3.0 <5.7.2 \|\| >=5.8.0 <5.9.2 \|\| >=5.10.0 <5.11.2 \|\| >=6.0.0 <6.0.2 \|\| >=6.1.0 <6.2.1	4.9.5, 5.2.1, 5.7.2, 5.9.2, 5.11.2, 6.0.2, 6.2.1
nuget	nuget.commands	>=3.5.0 <4.9.5 \|\| >=5.0.0 <5.2.1 \|\| >=5.3.0 <5.7.2 \|\| >=5.8.0 <5.9.2 \|\| >=5.10.0 <5.11.2 \|\| >=6.0.0 <6.0.2 \|\| >=6.1.0 <6.2.1	4.9.5, 5.2.1, 5.7.2, 5.9.2, 5.11.2, 6.0.2, 6.2.1
nuget	nuget.commandline	>=3.5.0 <4.9.5 \|\| >=5.0.0 <5.2.1 \|\| >=5.3.0 <5.7.2 \|\| >=5.8.0 <5.9.2 \|\| >=5.10.0 <5.11.2 \|\| >=6.0.0 <6.0.2 \|\| >=6.1.0 <6.2.1	4.9.5, 5.2.1, 5.7.2, 5.9.2, 5.11.2, 6.0.2, 6.2.1
rpm rhel8	dotnet6.0	<0:6.0.106-1.el8_6	0:6.0.106-1.el8_6
rpm rhel9	dotnet6.0	<0:6.0.106-1.el9_0	0:6.0.106-1.el9_0
rpm rhel8	dotnet3.1	<0:3.1.420-1.el8_6	0:3.1.420-1.el8_6

Aliases

1. CVE-2022-301842. NVD-2022-301843. OSV-2022-301844. GHSA-3885-8gqc-3wpf5. GCVE-2022-30184

References

1. https://github.com/NuGet/NuGet.Client/security/advisories/GHSA-3885-8gqc-3wpf2. https://github.com/NuGet/Home/issues/11883#issuecomment-11561947553. https://github.com/NuGet/NuGet.Client/commit/ec6e62a645ec6b53a8784bf4571cac7786fd700b#diff-9e678e6dcc29381eb7c564f0e75ffc3ffc35458eca412c35b6404340b698d074R58-R654. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DMP34G53EA2DBTBLFOAQCDZRRENE2EA25. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWNH4AC3LFVX35MDRX5OBZDGD2AMH66K6. https://lists.fedoraproject.org/archives/list/[email protected]/message/DMP34G53EA2DBTBLFOAQCDZRRENE2EA27. https://lists.fedoraproject.org/archives/list/[email protected]/message/XWNH4AC3LFVX35MDRX5OBZDGD2AMH66K8. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-301849. https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30184