Hugo versions 0.123.0 to 0.139.4 have unescaped HTML attributes in internal templates.
Reporter | Title | Published | Views | Family All 11 |
---|---|---|---|---|
RedhatCVE | CVE-2024-55601 | 12 Dec 202408:48 | – | redhatcve |
OSV | UBUNTU-CVE-2024-55601 | 9 Dec 202422:15 | – | osv |
OSV | Hugo does not escape some attributes in internal templates in github.com/gohugoio/hugo | 10 Dec 202421:29 | – | osv |
OSV | Hugo does not escape some attributes in internal templates | 9 Dec 202420:44 | – | osv |
CVE | CVE-2024-55601 | 9 Dec 202422:15 | – | cve |
AlpineLinux | CVE-2024-55601 | 9 Dec 202422:15 | – | alpinelinux |
NVD | CVE-2024-55601 | 9 Dec 202422:15 | – | nvd |
Cvelist | CVE-2024-55601 Hugo does not escape some attributes in internal templates | 9 Dec 202421:11 | – | cvelist |
Veracode | HTML Attribute Injection | 19 Dec 202414:54 | – | veracode |
Debian CVE | CVE-2024-55601 | 9 Dec 202422:15 | – | debiancve |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo