Lucene search

K
osvGoogleOSV:GO-2024-2747
HistoryJun 04, 2024 - 3:19 p.m.

Hugo Markdown titles are not escaped in internal render hooks in github.com/gohugoio/hugo

2024-06-0415:19:21
Google
osv.dev
10
hugo
markdown
titles
not
escaped
internal
render
hooks
github.com/gohugoio/hugo
software

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0

Percentile

15.5%

Hugo Markdown titles are not escaped in internal render hooks in github.com/gohugoio/hugo

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0

Percentile

15.5%