CVE-2024-37304CWE-79

NuGetGallery's Markdown Autolinks Processing Vulnerable to Cross-site Scripting

Medium · published June 12, 2024

CVSS v3.1
6.1
EPSS
1%
Percentile
50.5
In the wild
Unconfirmed
What it is

NuGet Gallery is a package repository that powers nuget.org. The NuGetGallery has a security vulnerability related to its handling of autolinks in Markdown content. While the platform properly filters out JavaScript from standard links, it does not adequately sanitize autolinks. This oversight allows attackers to exploit autolinks as a vector for Cross-Site Scripting (XSS) attacks. When a user inputs a Markdown autolink such as `<javascript:alert(1)>`, the link is rendered without proper sanitization. This means that the JavaScript code within the autolink can be executed by the browser, leading to an XSS attack. Version 2024.05.28 contains a patch for this issue.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00651 · 50.5th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2024-06-12T14:27Z
EPSS history
Timeline
  • 12 JUN 14:27Z
    NuGetGallery's Markdown Autolinks Processing Vulnerable to Cross-site Scripting
    cvelistv5