Lucene search

CVE-2024-32875

🗓️ 23 Apr 2024 00:00:00Reported by ubuntu.comType

Hugo static site generator vulnerability in Markdown parsing

Reporter	Title	Published	Views	Family All 12
Chainguard	CVE-2024-32875 vulnerabilities	19 May 202403:07	–	cgr
OSV	Hugo Markdown titles are not escaped in internal render hooks in github.com/gohugoio/hugo	4 Jun 202415:19	–	osv
OSV	CGA-fh8j-hg45-wfv8	6 Jun 202412:27	–	osv
OSV	Hugo Markdown titles do not escaped in internal render hooks	23 Apr 202421:16	–	osv
NVD	CVE-2024-32875	23 Apr 202421:15	–	nvd
Vulnrichment	CVE-2024-32875 Hugo doesn't escape markdown title in internal render hooks	23 Apr 202420:23	–	vulnrichment
Github Security Blog	Hugo Markdown titles do not escaped in internal render hooks	23 Apr 202421:16	–	github
CVE	CVE-2024-32875	23 Apr 202421:15	–	cve
Cvelist	CVE-2024-32875 Hugo doesn't escape markdown title in internal render hooks	23 Apr 202420:23	–	cvelist
Veracode	Cross Site Scripting	24 Apr 202404:54	–	veracode

Source	Link
cve	www.cve.org/CVERecord
github	www.github.com/gohugoio/hugo/security/advisories/GHSA-ppf8-hhpp-f5hj
github	www.github.com/gohugoio/hugo/releases/tag/v0.125.3
gohugo	www.gohugo.io/getting-started/configuration-markup/
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-32875
launchpad	www.launchpad.net/bugs/cve/CVE-2024-32875
security-tracker	www.security-tracker.debian.org/tracker/CVE-2024-32875

OS	OS Version	Architecture	Package	Package Version	Filename
ubuntu	18.04	noarch	hugo	any	UNKNOWN
ubuntu	20.04	noarch	hugo	any	UNKNOWN
ubuntu	22.04	noarch	hugo	any	UNKNOWN
ubuntu	24.04	noarch	hugo	any	UNKNOWN
ubuntu	16.04	noarch	hugo	any	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

23 Apr 2024 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS36.1

EPSS0.000