CVE-2024-37304

NuGet Gallery is a package repository that powers nuget.org. The NuGetGallery has a security vulnerability related to its handling of autolinks in Markdown content. While the platform properly filters out JavaScript from standard links, it does not adequately sanitize autolinks. This oversight allows attackers to exploit autolinks as a vector for Cross-Site Scripting (XSS) attacks. When a user inputs a Markdown autolink such as `<javascript:alert(1)>`, the link is rendered without proper sanitization. This means that the JavaScript code within the autolink can be executed by the browser, leading to an XSS attack. Version 2024.05.28 contains a patch for this issue.

• CWE-79

• https://github.com/NuGet/NuGetGallery/commit/c52b023659f4ad7b626874c1063f2b5e878a4fe0Patch
• https://github.com/NuGet/NuGetGallery/pull/9836Issue Tracking
• https://github.com/NuGet/NuGetGallery/security/advisories/GHSA-gwjh-c548-f787Vendor Advisory
• https://github.com/NuGet/NuGetGallery/commit/c52b023659f4ad7b626874c1063f2b5e878a4fe0Patch
• https://github.com/NuGet/NuGetGallery/pull/9836Issue Tracking
• https://github.com/NuGet/NuGetGallery/security/advisories/GHSA-gwjh-c548-f787Vendor Advisory

Published

Jun 12, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-37299Discourse is an open source discussion platform. Prior to 3.…7.5
• CVE-2024-3730The Simple Membership plugin for WordPress is vulnerable to …5.4
• CVE-2024-37300OAuthenticator is software that allows OAuth2 identity provi…8.1
• CVE-2024-37301Document Merge Service is a document template merge service …7.2
• CVE-2024-37302Synapse is an open-source Matrix homeserver. Synapse version…7.5
• CVE-2024-37303Synapse is an open-source Matrix homeserver. Synapse before …5.3
• CVE-2024-37305oqs-provider is a provider for the OpenSSL 3 cryptography li…8.2
• CVE-2024-37306Computer Vision Annotation Tool (CVAT) is an interactive vid…7.1
• CVE-2024-37307Cilium is a networking, observability, and security solution…6.5
• CVE-2024-37308The Cooked Pro recipe plugin for WordPress is vulnerable to …5.4
• CVE-2024-37309CrateDB is a distributed SQL database. A high-risk vulnerabi…5.3
• CVE-2024-3731The Customer Reviews for WooCommerce plugin for WordPress is…6.1