VULNERABILITY INTELLIGENCE

CVE-2019-0976

CVSS score5.5 MEDIUM

EPSS probability1.15%

CISA KEVNot currently listed

Published2019-05-16

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Description

A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify contents of the intermediate build folder (by default "obj"), aka 'NuGet Package Manager Tampering Vulnerability'.

Primary references

secure@microsoft.com — Broken Link
secure@microsoft.com — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Broken Link
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory