Lucene search

CVE-2024-40730

🗓️ 09 Jul 2024 18:11:15Reported by mitreType

cve🔗 web.nvd.nist.gov👁 37 Views🌐 WEB

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter at /dcim/interfaces/{id}/edit/

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 5
CNVD	NetBox Cross-Site Scripting Vulnerability (CNVD-2024-37586)	12 Jul 202400:00	–	cnvd
Vulnrichment	CVE-2024-40730	9 Jul 202400:00	–	vulnrichment
NVD	CVE-2024-40730	9 Jul 202418:15	–	nvd
Cvelist	CVE-2024-40730	9 Jul 202400:00	–	cvelist
OSV	CVE-2024-40730	9 Jul 202418:15	–	osv

Nvd

Node

netbox netboxMatch4.0.3

Source	Link
github	www.github.com/minhquan202/Vuln-Netbox

Parameter	Position	Path	Description	CWE
Name	query param	/dcim/interfaces/{id}/edit/	Cross-site scripting vulnerability allowing execution of arbitrary web scripts via crafted payload.	CWE-79

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

09 Jul 2024 18:15Current

5.6Medium risk

Vulners AI Score5.6

CVSS36.1

EPSS0.00078

SSVC

CWE-79