Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up

GHSA-g5vf-38cp-4px9

GitHub Security Advisory

.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability

✓ GitHub Reviewed HIGH Has CVE
View on GitHub

Advisory Details

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.

Affected Packages

NuGet Microsoft.NETCore.App
Affected versions: 2.1.0 (fixed in 2.1.20)
NuGet Microsoft.NETCore.App.Runtime.linux-arm
Affected versions: 3.1.0 (fixed in 3.1.6)
NuGet Microsoft.NETCore.App.Runtime.linux-arm64
Affected versions: 3.1.0 (fixed in 3.1.6)
NuGet Microsoft.NETCore.App.Runtime.linux-musl-arm64
Affected versions: 3.1.0 (fixed in 3.1.6)
NuGet Microsoft.NETCore.App.Runtime.linux-musl-x64
Affected versions: 3.1.0 (fixed in 3.1.6)
NuGet Microsoft.NETCore.App.Runtime.linux-x64
Affected versions: 3.1.0 (fixed in 3.1.6)
NuGet Microsoft.NETCore.App.Runtime.osx-x64
Affected versions: 3.1.0 (fixed in 3.1.6)
NuGet Microsoft.NETCore.App.Runtime.rhel.6-x64
Affected versions: 3.1.0 (fixed in 3.1.6)
NuGet Microsoft.NETCore.App.Runtime.win-arm
Affected versions: 3.1.0 (fixed in 3.1.6)
NuGet Microsoft.NETCore.App.Runtime.win-arm64
Affected versions: 3.1.0 (fixed in 3.1.6)
NuGet Microsoft.NETCore.App.Runtime.win-x64
Affected versions: 3.1.0 (fixed in 3.1.6)
NuGet Microsoft.NETCore.App.Runtime.win-x86
Affected versions: 3.1.0 (fixed in 3.1.6)

Related CVEs

CVE-2020-1147

Key Information

GHSA ID
GHSA-g5vf-38cp-4px9
Published
May 24, 2022 5:22 PM
Last Modified
October 21, 2022 8:58 PM
CVSS Score
7.5 /10
Primary Ecosystem
NuGet
Primary Package
Microsoft.NETCore.App
GitHub Reviewed
✓ Yes

Dataset

Last updated: July 28, 2025 6:37 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.