{"id":"GHSA-q8g5-rw97-f55h","revision":"437cef4a31f9439282b2b332ee57fff0","records":[{"revision":"437cef4a31f9439282b2b332ee57fff0","observedAt":"2026-10-23T16:01:25.029+00:00","statement":{"source":"osv","id":"GHSA-q8g5-rw97-f55h","aliases":[],"title":"Duplicate Advisory: Microsoft Security Advisory CVE-2025-55247 | .NET Denial of Service Vulnerability","description":"### Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-w3q9-fxm7-j8fq. This link is maintained to preserve external references.\n\n### Original Description\nImproper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.","state":2,"publishedAt":"2025-10-14T18:30:30+00:00","modifiedAt":"2025-10-15T17:28:01+00:00","affected":[{"ecosystem":"NuGet","name":"Microsoft.Build.Tasks.Core","ranges":[{"type":"ECOSYSTEM","events":[{"kind":"introduced","version":"17.15.0-preview-25277-114"},{"kind":"fixed","version":"18.0.0-preview-25476-107"}]}],"versions":["17.15.0-preview-25277-114"],"rawVersionEvidence":null}],"metrics":[{"system":"CVSS_V3","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","score":null,"severity":null},{"system":"Publisher rating","vector":null,"score":null,"severity":"HIGH"}],"references":["https://nvd.nist.gov/vuln/detail/CVE-2025-55247","https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55247"],"sourceUrl":"https://github.com/advisories/GHSA-q8g5-rw97-f55h","license":"GitHub Advisory Database · CC-BY-4.0","key":"osv:GHSA-q8g5-rw97-f55h","identifiers":["GHSA-q8g5-rw97-f55h"]},"retained":false,"historicalAffected":[]}],"coverage":[]}