CVE-2024-47604 — XSS vulnerability in NuGetGallery HTML attributes handling
NuGet Gallery is a package repository that powers nuget.org. The NuGetGallery has a security vulnerability in its handling of HTML element attributes, which allows an attacker t…
Published: 2024-10-01 · CVSS: 8.2 · CVSS 3.1
NuGet Gallery is a package repository that powers nuget.org. The NuGetGallery has a security vulnerability in its handling of HTML element attributes, which allows an attacker to execute arbitrary HTML or Javascript code in a victim's browser.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7