.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2020-1147 · ADVISORY
• dotnet/announcements · WEB
• portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1147 · WEB
• cisa.gov/known-exploited-vulnerabilities-catalog · WEB
• exploitalert.com/view-details.html · WEB
• packetstormsecurity.com/files/158694/SharePoint-DataSet-DataTable-Deserialization.html · WEB
• packetstormsecurity.com/files/158876/Microsoft-SharePoint-Server-2019-Remote-Code-Execution.html · WEB
• packetstormsecurity.com/files/163644/Microsoft-SharePoint-Server-2019-Remote-Code-Execution.html · WEB
• CISA KEV · CVE-2020-1147

Microsoft.NETCore.App의 다른 취약점

• CVE-2021-34485보통 5.0.NET Core and Visual Studio Information Disclosure Vulnerability
• CVE-2021-1721보통 6.5.NET Core and Visual Studio Denial of Service Vulnerability
• CVE-2020-1108높음 7.5A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker who successfully expl…
• CVE-2019-0657보통 5.9A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio …
• CVE-2019-0564높음 7.5A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerabilit…