Low, CVSS 3.5NuGetPublished
EnumStringValues vulnerable to Uncontrolled Resource Consumption
CVE-2020-36620 · GHSA-vq23-hwg7-hxrh
- Affected
- NuGet enumstringvalues < 4.0.2
- Fixed in
- 4.0.2· Vendor fix available
- Issue
- A vulnerability was found in Brondahl EnumStringValues 4.0.1. It has been declared as problematic. This vulnerability affects the function GetStringValuesWithPreferencesUncache of the file EnumStringValues/EnumExtensions.cs. The manipulation leads to resource consumption. Upgrading to version 4.0.2 to address this issue. The name of the patch is c0fc7806beb24883cc2f9543ebc50c0820297307. It is recommended to upgrade the affected component. VDB-216466 is the identifier assigned to this vulnerability.
Recommended action: Upgrade to 4.0.2 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.