CVE-2022-41032
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Oct 11, 2022
Updated: Jan 2, 2025
Summary
CVE-2022-41032 is an elevation of privilege vulnerability affecting NuGet, a popular package manager for the .NET development platform. An attacker who can manipulate a NuGet feed can potentially cause the NuGet Client to install packages with elevated permissions, posing a security risk. The vulnerability arises due to insufficient input validation of the NuGet Client. Developers are urged to update to the latest version of NuGet to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Visual Studio 2019
- Microsoft Visual Studio 2022
- Microsoft Visual Studio 2019
- Fedora Operating System
- Microsoft .NET Framework
Affected Vendors
- Microsoft
- Fedora Project