CVE-2024-47604

Summary

CVE-2024-47604 is a high-severity vulnerability found in the NuGet Gallery, which affects multiple products associated with the package repository nuget.org. The flaw arises from improper handling of HTML element attributes, allowing attackers to execute arbitrary HTML or JavaScript code in a victim's browser, posing a confidentiality risk to users. Successful exploitation requires user interaction and can be executed over the network with no special privileges needed, indicating a low complexity for attackers. Organizations are advised to remediate this issue by applying updates as detailed in security advisories available on GitHub. Failure to address this vulnerability may lead to significant security breaches involving sensitive information exposure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.