Lucene search

CVE-2024-37304

🗓️ 12 Jun 2024 15:52:15Reported by GitHub_MType

NuGet Gallery security vulnerability in autolinks handling

Reporter	Title	Published	Views	Family All 3
OSV	CVE-2024-37304	12 Jun 202415:15	–	osv
Cvelist	CVE-2024-37304 NuGetGallery's Markdown Autolinks Processing Vulnerable to Cross-site Scripting	12 Jun 202414:27	–	cvelist
NVD	CVE-2024-37304	12 Jun 202415:15	–	nvd

Vulners

Node

nuget nugetgalleryRange<2024.05.28

[
  {
    "vendor": "NuGet",
    "product": "NuGetGallery",
    "versions": [
      {
        "version": "< 2024.05.28",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/NuGet/NuGetGallery/commit/c52b023659f4ad7b626874c1063f2b5e878a4fe0
github	www.github.com/NuGet/NuGetGallery/pull/9836
github	www.github.com/NuGet/NuGetGallery/security/advisories/GHSA-gwjh-c548-f787

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

12 Jun 2024 15:15Current

6Medium risk

Vulners AI Score6

CVSS36.1

EPSS0.0004

CWE-79