CVE-2024-47604
XSS vulnerability in NuGetGallery HTML attributes handling
概要
XSS vulnerability in NuGetGallery HTML attributes handling
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
NuGet Gallery is a package repository that powers nuget.org. The NuGetGallery has a security vulnerability in its handling of HTML element attributes, which allows an attacker to execute arbitrary HTML or Javascript code in a victim's browser.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com