要点
- CVE-2020-1147 是影响 Microsoft.NETCore.App, Microsoft.NETCore.App.Runtime.linux-arm, Microsoft.NETCore.App.Runtime.linux-arm64 的高危 (CVSS 7.8)漏洞。
- 已被实际利用：CISA 于 03/11/2021 将其加入 KEV 目录。
- 未来 30 天内被利用的概率（EPSS）：95.8%，高于 99.9% 的漏洞。
- 修复：升级到 2.1.20, 3.1.6 或更高版本。
Description
A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.
NVD description
A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.
Microsoft.NETCore.App 的其他漏洞
查看全部 →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free