CVE-2019-0657
Improper Input Validation in .Net Framework API's
Summary
Remediation
Upgrade to the fixed version using your package manager.
dotnet add package System.Private.Uri --version 4.3.2
dotnet add package Microsoft.NETCore.App --version 2.2.2
dotnet add package Microsoft.NETCore.App --version 2.1.8
After upgrading, run your dependency scanner again to confirm the vulnerability is resolved.
Affected Packages (3)
| Package | Ecosystem | Affected | Fixed In |
|---|---|---|---|
| System.Private.Uri | nuget | 4.3.0, 4.3.1 | 4.3.2 |
| Microsoft.NETCore.App | nuget | 2.2.0, 2.2.1 | 2.2.2 |
| Microsoft.NETCore.App | nuget | 2.1.0, 2.1.1, 2.1.2, 2.1.3 (+4 more) | 2.1.8 |
Vulnerability Classification
Common Weakness Enumeration (CWE) identifiers for this vulnerability type.
- CWE-20Improper Input ValidationMITRE
CVSS Score Breakdown
What the CVSS (Common Vulnerability Scoring System) 5.9 score means for each attack dimension.
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
References
- https://nvd.nist.gov/vuln/detail/CVE-2019-0657ADVISORY
- https://github.com/dotnet/announcements/issues/97WEB
- https://github.com/github/advisory-database/issues/302WEB
- https://access.redhat.com/errata/RHSA-2019:0349WEB
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0657WEB
- https://www.securityfocus.com/bid/106890WEB
Frequently Asked Questions
- What is CVE-2019-0657?
- Improper Input Validation in .Net Framework API's This vulnerability has been assigned a severity rating of MEDIUM (CVSS score: 5.9/10).
- How do I check if my project is affected by CVE-2019-0657?
- CVE-2019-0657 affects System.Private.Uri and Microsoft.NETCore.App. Use GeekWala's free vulnerability scanner to check your dependencies against CVE-2019-0657 and 200,000+ other known vulnerabilities.
Severity & Exploitability
Exploitation requires specific conditions or has limited impact. Remediate within weeks.
Also Known As
Related CVEs
- CVE-2019-0545HIGH
Exposure of Sensitive Information in System.Net.Http
- CVE-2020-1108HIGH
.NET Core & .NET Framework Denial of Service Vulnerability
- CVE-2017-8585HIGH
Improper Input Validation in Microsoft.NETCore.App
- CVE-2020-1147HIGH
.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability
- CVE-2026-62909MEDIUM
Microsoft Security Advisory CVE-2026-62909 – .NET Elevation of Privilege Vulnerability
- CVE-2026-62902MEDIUM
Microsoft Security Advisory CVE-2026-62902 – .NET Information Disclosure Vulnerability
- CVE-2026-61807MEDIUM
Snipe-IT: Stored DOM XSS via table selected-count IDs
- CVE-2021-34485MEDIUM
.NET Core Information Disclosure Vulnerability
Check if you're affected
Scan your dependencies to see if this vulnerability affects your projects.
Scan Your Dependencies