CVE-2023-29337CWE-367

NuGet Client Remote Code Execution Vulnerability

High · published June 14, 2023

CVSS v3.1

7.1

EPSS

1%

Percentile

66.5

In the wild

Unconfirmed

What it is

NuGet Client Remote Code Execution Vulnerability

The record

Technical detail

CVSS v3.1: 7.1 · HIGH
Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CVSS v4.0: Not supplied
EPSS: 0.01148 · 66.5th percentile
Weakness: CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition
Published: 2023-06-14T14:52Z

EPSS history

Timeline

14 JUN 14:52Z
NuGet Client Remote Code Execution Vulnerability
cvelistv5