CVE-2023-29337 – NuGet Client Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2023-29337

NuGet Client Remote Code Execution Vulnerability A vulnerability was found in dotnet. This issue exists in NuGet where a potential race condition can lead to a symlink attack. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29337 https://access.redhat.com/security/cve/CVE-2023-29337 https://bugzilla.redhat.com/show_bug.cgi?id=2213703 • CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition •