PT-2024-27462 · Microsoft · Nuget Gallery

Jondouglas · Published 2024-06-12 · Updated 2024-06-13 · CVE-2024-37304

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions NuGet Gallery versions prior to 2024.05.28

Description The NuGet Gallery has a security issue related to its handling of autolinks in Markdown content. It does not adequately sanitize autolinks, allowing attackers to exploit them as a vector for Cross-Site Scripting (XSS) attacks. When a user inputs a Markdown autolink, the link is rendered without proper sanitization, enabling the execution of JavaScript code within the autolink by the browser.

Recommendations For versions prior to 2024.05.28, update to version 2024.05.28 to resolve the issue. As a temporary workaround, consider disabling the rendering of Markdown autolinks until the patch is applied. Restrict access to user-inputted Markdown content to minimize the risk of exploitation. Avoid using JavaScript code within Markdown autolinks in the affected NuGet Gallery versions until the issue is resolved.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-37304

GHSA-GWJH-C548-F787

Affected Products

Nuget Gallery

References · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/37xxx/CVE-2024-37304.json · Exploit
• https://github.com/NuGet/NuGetGallery/commit/c52b023659f4ad7b626874c1063f2b5e878a4fe0 · Patch
• https://github.com/NuGet/NuGetGallery/security/advisories/GHSA-gwjh-c548-f787 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-37304 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-37304 · Security Note
• https://github.com/NuGet/NuGetGallery/pull/9836 · Note