CVE-2024-47604
CVSS 3.1 Score 8.2 of 10 (high)
Details
Summary
CVE-2024-47604 is a high-severity vulnerability found in the NuGet Gallery, which affects multiple products associated with the package repository nuget.org. The flaw arises from improper handling of HTML element attributes, allowing attackers to execute arbitrary HTML or JavaScript code in a victim's browser, posing a confidentiality risk to users. Successful exploitation requires user interaction and can be executed over the network with no special privileges needed, indicating a low complexity for attackers. Organizations are advised to remediate this issue by applying updates as detailed in security advisories available on GitHub. Failure to address this vulnerability may lead to significant security breaches involving sensitive information exposure.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions