CVE-2020-1147
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2020-1147
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-1147.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2020-1147
- Aliases
- Related
- Published
- 2020-07-14T23:15:12Z
- Modified
- 2024-10-12T05:36:52.405917Z
- Severity
-
- 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.
- References
-
- http://packetstormsecurity.com/files/158694/SharePoint-DataSet-DataTable-Deserialization.html
- http://packetstormsecurity.com/files/158876/Microsoft-SharePoint-Server-2019-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/163644/Microsoft-SharePoint-Server-2019-Remote-Code-Execution.html
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1147
- https://www.exploitalert.com/view-details.html?id=35992
Affected packages
Git / github.com/dotnet/core
Affected ranges
- Type
- GIT
- Repo
- https://github.com/dotnet/core
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast affectedLast affectedLast affected
Affected versions
v1.*
v1.0.0
v1.0.0-rc1
v1.0.0-rc2
v1.0.1
v1.0.10
v1.0.11
v1.0.12
v1.0.13
v1.0.14
v1.0.15
v1.0.16
v1.0.2
v1.0.3
v1.0.4
v1.0.5
v1.0.7
v1.0.8
v1.0.9
v1.1
v1.1.0
v1.1.0-preview1
v1.1.1
v1.1.10
v1.1.11
v1.1.12
v1.1.13
v1.1.2
v1.1.4
v1.1.5
v1.1.6
v1.1.7
v1.1.8
v1.1.9
v2.*
v2.0.0
v2.0.0-preview1
v2.0.0-preview2
v2.0.3
v2.0.4
v2.0.5
v2.0.6
v2.0.7
v2.0.7-2
v2.0.9
v2.1-preview1
v2.1-preview2
v2.1-rc1
v2.1.0
v2.1.1
v2.1.11
v2.1.12
v2.1.13
v2.1.14
v2.1.2
v2.1.3
v2.1.4
v2.1.5
v2.1.6
v2.1.7
v2.1.8
v2.1.9
v2.2.0
v2.2.0-preview1
v2.2.0-preview2
v2.2.0-preview3
v2.2.1
v2.2.2
v2.2.3
v2.2.5
v2.2.6
v2.2.7
v2.2.8
v3.*
v3.0.0
v3.0.0-preview1
v3.0.0-preview2
v3.0.0-preview3
v3.0.0-preview4
v3.0.0-preview5
v3.0.0-preview6
v3.0.0-preview7
v3.0.0-preview8
v3.0.0-preview9
v3.0.0-rc1
v3.0.1
v3.1.0
v3.1.0-preview1
v3.1.0-preview2
v3.1.0-preview3