CVE:CVE-2022-24512
CNNVD:CNNVD-202203-699
Microsoft Visual Studio和Microsoft .NET Core都是美国微软（Microsoft）公司的产品。Microsoft Visual Studio是一款开发工具套件系列产品，也是一个基本完整的开发工具集，它包括了整个软件生命周期中所需要的大部分工具。Microsoft .NET Core是一个跨平台、高性能、开源框架，用于构建现代的、支持云的、连接 Internet 的应用程序。
Microsoft .NET Core和Microsoft Visual Studio 存在代码注入漏洞。以下产品和版本受到影响：Microsoft Visual Studio 2022 version 17.0,.NET 5.0,.NET 6.0,.NET Core 3.1,Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10),Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6),Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)。
solution:Upgrade microsoft .net to a higher version than 5.0,6.0.0,and avoid the version 5.0,6.0.0; Upgrade microsoft .net_core to a higher version than 3.1,and avoid the version 3.1; Upgrade microsoft powershell to a higher version than 7.0.9,7.1.6,7.2.2,and avoid the version [7.0,7.0.9),[7.1,7.1.6),[7.2,7.2.2); Upgrade microsoft visual_studio_2019 to a higher version than 16.6.4,16.7.26,16.8.7,16.9.18,16.10.4,16.11.11,and avoid the version [16.0,16.6.4],[16.7.0,16.7.26),[16.8.0,16.8.7],[16.9.0,16.9.18),[16.10.0,16.10.4],[16.11.0,16.11.11); Upgrade microsoft visual_studio_2022 to a higher version than 17.0.7,and avoid the version [17.0.0,17.0.7); Upgrade fedoraproject fedora to a higher version than 34,35,36,and avoid the version 34,35,36