HTML Attribute Injection

🗓️ 19 Dec 2024 14:54:12Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 8 Views

Hugo is vulnerable to HTML Attribute Injection due to insufficient sanitization of user input.

Reporter	Title	Published	Views	Family All 38
AlpineLinux	CVE-2024-55601	9 Dec 202421:11	–	alpinelinux
Circl	CVE-2024-55601	9 Dec 202421:18	–	circl
CNNVD	Hugo 跨站脚本漏洞	9 Dec 202400:00	–	cnnvd
CVE	CVE-2024-55601	9 Dec 202421:11	–	cve
Cvelist	CVE-2024-55601 Hugo does not escape some attributes in internal templates	9 Dec 202421:11	–	cvelist
Debian CVE	CVE-2024-55601	9 Dec 202421:11	–	debiancve
EUVD	EUVD-2024-3458	3 Oct 202520:07	–	euvd
Github Security Blog	Hugo does not escape some attributes in internal templates	9 Dec 202420:44	–	github
NVD	CVE-2024-55601	9 Dec 202422:15	–	nvd
OPENSUSE Linux	govulncheck-vulndb-0.0.20241213T205935-1.1 on GA media (moderate)	19 Dec 202400:00	–	opensuse

Vulners

Node

gohugoio hugoMatch0.122.0-r0go

AND

gohugoio hugoMatch0.120.4-r0go

AND

gohugoio hugoMatch0.88.1-r0go

AND

gohugoio hugoMatch0.128.2-r0go

AND

gohugoio hugoMatch0.69.2-r0go

AND

gohugoio hugoMatch0.69.0-r0go

AND

gohugoio hugoMatch0.116.1-r1go

AND

gohugoio hugoMatch0.107.0-r0go

AND

gohugoio hugoMatch0.94.1-r0go

AND

gohugoio hugoMatch0.120.3-r0go

AND

gohugoio hugoMatch0.111.3-r1go

AND

gohugoio hugoMatch0.114.1-r0go

AND

gohugoio hugoMatch0.89.1-r0go

AND

gohugoio hugoMatch0.114.0-r0go

AND

gohugoio hugoMatch0.101.0-r2go

AND

gohugoio hugoMatch0.83.1-r0go

AND

gohugoio hugoMatch0.122.0-r1go

AND

gohugoio hugoMatch0.125.4-r1go

AND

gohugoio hugoMatch0.124.1-r0go

AND

gohugoio hugoMatch0.81.0-r0go

AND

gohugoio hugoMatch0.139.0-r0go

AND

gohugoio hugoMatch0.105.0-r0go

AND

gohugoio hugoMatch0.136.2-r0go

AND

gohugoio hugoMatch0.89.4-r0go

AND

gohugoio hugoMatch0.100.0-r0go

AND

gohugoio hugoMatch0.117.0-r0go

AND

gohugoio hugoMatch0.98.0-r1go

AND

gohugoio hugoMatch0.83.1-r1go

AND

gohugoio hugoMatch0.115.3-r0go

AND

gohugoio hugoMatch0.96.0-r0go

AND

gohugoio hugoMatch0.84.1-r0go

AND

gohugoio hugoMatch0.112.3-r0go

AND

gohugoio hugoMatch0.108.0-r0go

AND

gohugoio hugoMatch0.119.0-r1go

AND

gohugoio hugoMatch0.93.2-r0go

AND

gohugoio hugoMatch0.100.2-r0go

AND

gohugoio hugoMatch0.92.0-r0go

AND

gohugoio hugoMatch0.85.0-r0go

AND

gohugoio hugoMatch0.101.0-r3go

AND

gohugoio hugoMatch0.125.4-r0go

AND

gohugoio hugoMatch0.134.2-r0go

AND

gohugoio hugoMatch0.106.0-r0go

AND

gohugoio hugoMatch0.118.2-r0go

AND

gohugoio hugoMatch0.98.0-r0go

AND

gohugoio hugoMatch0.113.0-r0go

AND

gohugoio hugoMatch0.115.0-r0go

AND

gohugoio hugoMatch0.111.3-r0go

AND

gohugoio hugoMatch0.119.0-r0go

AND

gohugoio hugoMatch0.82.0-r0go

AND

gohugoio hugoMatch0.111.3-r2go

AND

gohugoio hugoMatch0.82.1-r0go

AND

gohugoio hugoMatch0.92.2-r0go

AND

gohugoio hugoMatch0.99.1-r0go

AND

gohugoio hugoMatch0.130.0-r0go

AND

gohugoio hugoMatch0.92.1-r0go

AND

gohugoio hugoMatch0.111.2-r0go

AND

gohugoio hugoMatch0.134.3-r0go

AND

gohugoio hugoMatch0.65.3-r0go

AND

gohugoio hugoMatch0.94.2-r0go

AND

gohugoio hugoMatch0.79.1-r0go

AND

gohugoio hugoMatch0.90.1-r0go

AND

gohugoio hugoMatch0.120.1-r0go

AND

gohugoio hugoMatch0.125.4-r2go

AND

gohugoio hugoMatch0.138.0-r0go

AND

gohugoio hugoMatch0.110.0-r0go

AND

gohugoio hugoMatch0.101.0-r0go

AND

gohugoio hugoMatch0.97.3-r0go

AND

gohugoio hugoMatch0.101.0-r1go

AND

gohugoio hugoMatch0.115.1-r0go

AND

gohugoio hugoMatch0.115.4-r0go

AND

gohugoio hugoMatch0.95.0-r0go

AND

gohugoio hugoMatch0.88.1-r1go

AND

gohugoio hugoMatch0.110.0-r2go

AND

gohugoio hugoMatch0.136.5-r0go

AND

gohugoio hugoMatch0.110.0-r1go

AND

gohugoio hugoMatch0.107.0-r1go

AND

gohugoio hugoMatch0.100.1-r0go

AND

gohugoio hugoMatch0.101.0-r4go

AND

gohugoio hugoMatch0.69.2-r1go

AND

gohugoio hugoMatch0.109.0-r0go

AND

gohugoio hugoMatch0.122.0-r2go

AND

gohugoio hugoMatch0.135.0-r0go

AND

gohugoio hugoMatch0.91.2-r0go

AND

gohugoio hugoMatch0.71.1-r0go

AND

alpinelinux alpine_linuxMatchedge

gohugoio github.com/gohugoio/hugoRangev0.123.0–0.123.0go

Source	Link
github	www.github.com/gohugoio/hugo/commit/54398f8d572c689f9785d59e907fd910a23401b0
github	www.github.com/advisories/GHSA-c2xf-9v2r-r2rx

20 Dec 2024 11:11Current

6.7Medium risk

Vulners AI Score6.7

CVSS 45.3

EPSS0.0038

SSVC