{"id":"CVE-2019-0657","aliases":["GHSA-x5qj-9vmx-7g6g"],"url":"https://o3.security/vulnerability/CVE-2019-0657","summary":"Improper Input Validation in .Net Framework API's","details":"A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability'.","published":"2019-03-05T23:29:02.037Z","modified":"2026-09-14T03:45:05.089678626Z","cvss":{"score":5.9,"severity":"MEDIUM","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"NuGet","name":"Microsoft.NETCore.App","fixedVersion":"2.2.2"},{"ecosystem":"NuGet","name":"Microsoft.NETCore.App","fixedVersion":"2.1.8"},{"ecosystem":"NuGet","name":"System.Private.Uri","fixedVersion":"4.3.2"}],"fix":null,"references":[{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/106890"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:0349"},{"type":"FIX","url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0657"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-09-14T03:45:05.089678626Z"}}