Skip to content
OpenAdvisories
High · 8.2 CVE-2024-47604 EUVD-2024-42540

XSS vulnerability in NuGetGallery HTML attributes handling

Published Oct 1, 2024 · Updated Oct 1, 2024 · Assigned by GitHub_M

Description

NuGet Gallery is a package repository that powers nuget.org. The NuGetGallery has a security vulnerability in its handling of HTML element attributes, which allows an attacker to execute arbitrary HTML or Javascript code in a victim's browser.

Affected products

VendorProductAffectedFixed
NuGet NuGetGallery > 2024.06.21, <= 2024.09.25 —

References