Логотип exploitDog
bind:CVE-2024-32875
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-32875

Количество 4

Количество 4

ubuntu логотип

CVE-2024-32875

почти 2 года назад

Hugo is a static site generator. Starting in version 0.123.0 and prior to version 0.125.3, title arguments in Markdown for links and images not escaped in internal render hooks. Hugo users who are impacted are those who have these hooks enabled and do not trust their Markdown content files. The issue is patched in v0.125.3. As a workaround, replace the templates with user defined templates or disable the internal templates.

CVSS3: 6.1
EPSS: Низкий
nvd логотип

CVE-2024-32875

почти 2 года назад

Hugo is a static site generator. Starting in version 0.123.0 and prior to version 0.125.3, title arguments in Markdown for links and images not escaped in internal render hooks. Hugo users who are impacted are those who have these hooks enabled and do not trust their Markdown content files. The issue is patched in v0.125.3. As a workaround, replace the templates with user defined templates or disable the internal templates.

CVSS3: 6.1
EPSS: Низкий
debian логотип

CVE-2024-32875

почти 2 года назад

Hugo is a static site generator. Starting in version 0.123.0 and prior ...

CVSS3: 6.1
EPSS: Низкий
github логотип

GHSA-ppf8-hhpp-f5hj

почти 2 года назад

Hugo Markdown titles do not escaped in internal render hooks

CVSS3: 6.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2024-32875

Hugo is a static site generator. Starting in version 0.123.0 and prior to version 0.125.3, title arguments in Markdown for links and images not escaped in internal render hooks. Hugo users who are impacted are those who have these hooks enabled and do not trust their Markdown content files. The issue is patched in v0.125.3. As a workaround, replace the templates with user defined templates or disable the internal templates.

CVSS3: 6.1
0%
Низкий
почти 2 года назад
nvd логотип
CVE-2024-32875

Hugo is a static site generator. Starting in version 0.123.0 and prior to version 0.125.3, title arguments in Markdown for links and images not escaped in internal render hooks. Hugo users who are impacted are those who have these hooks enabled and do not trust their Markdown content files. The issue is patched in v0.125.3. As a workaround, replace the templates with user defined templates or disable the internal templates.

CVSS3: 6.1
0%
Низкий
почти 2 года назад
debian логотип
CVE-2024-32875

Hugo is a static site generator. Starting in version 0.123.0 and prior ...

CVSS3: 6.1
0%
Низкий
почти 2 года назад
github логотип
GHSA-ppf8-hhpp-f5hj

Hugo Markdown titles do not escaped in internal render hooks

CVSS3: 6.1
0%
Низкий
почти 2 года назад

Уязвимостей на страницу