NuGet Gallery 跨站脚本漏洞

NuGet Gallery is a NuGet open source package repository that supports NuGet. A cross-site scripting vulnerability exists in NuGet Gallery v2024.05.28 and earlier versions, which stems from mishandling of automated links in Markdown content and is vulnerable to cross-site scripting attacks...

CVE-2024-37304 NuGetGallery's Markdown Autolinks Processing Vulnerable to Cross-site Scripting

NuGet Gallery is a package repository that powers nuget.org. The NuGetGallery has a security vulnerability related to its handling of autolinks in Markdown content. While the platform properly filters out JavaScript from standard links, it does not adequately sanitize autolinks. This oversight...