CVE:CVE-2022-41032
CNNVD:CNNVD-202210-541
NuGet Client是NuGet 客户端工具。包括 Visual Studio 扩展、命令行工具和 msbuild 支持。
NuGet Client存在安全漏洞。以下产品和版本受到影响：.NET 6.0,.NET Core 3.1,Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10),Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8),Microsoft Visual Studio 2022 version 17.0,Microsoft Visual Studio 2022 version 17.3,Visual Studio 2022 for Mac version 17.3,Microsoft Visual Studio 2022 version 17.2。
solution:Upgrade microsoft .net to a higher version than 6.0.0,and avoid the version 6.0.0; Upgrade microsoft .net_core to a higher version than 3.1,and avoid the version 3.1; Upgrade microsoft visual_studio_2019 to a higher version than 16.9.26,16.11.20,and avoid the version [16.0.0,16.9.26),[16.10.0,16.11.20); Upgrade microsoft visual_studio_2022 to a higher version than 17.0.15,17.2.9,17.3.6,17.3.7,and avoid the version [17.0.0,17.0.15),[17.2.0,17.2.9),[17.3,17.3.6),[17.3,17.3.7); Upgrade fedoraproject fedora to a higher version than 35,36,37,and avoid the version 35,36,37