search

mono / CppSharp

Tools and libraries to glue C/C++ APIs to high-level languages
MIT License
3.1k stars 511 forks source link

DotNet program vulnerability #1871

Open hardcoredarksky opened 1 week ago

hardcoredarksky commented 1 week ago
Brief Description

All Dotnet programs when updated do not delete the old DotNet directories. This is causing a vulnerability and since Dot net releases a new version every week or 2 it is frustrating to go through dozens of machines to delete the old directories when it should be deleted out when installing the new version. Even with the new version installed, programs like Tenable still show it as the old version because of these folders not automatically clearing out when it is updated. I am not sure who or where to report this to, but, I would love to see this fixed

They can be found here:

-Path "C:\Program Files\dotnet\shared\Microsoft.NetCore.App*", "C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App*", "C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App*", "C:\Program Files\dotnet\swidtag*", "C:\Program Files\dotnet\host\fxr*"

OS: Windows

kumja1 commented 2 days ago

Report it here: https://github.com/dotnet/sdk