Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-33791
HistoryMay 24, 2023 - 8:15 p.m.

Cross site scripting

2023-05-2420:15:00
PRIOn knowledge base
www.prio-n.com
5
cross site scripting
netbox v3.5.1
stored vulnerability
create provider accounts
crafted payload
name field

0.001 Low

EPSS

Percentile

23.5%

A stored cross-site scripting (XSS) vulnerability in the Create Provider Accounts (/circuits/provider-accounts/) function of Netbox v3.5.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field.

CPENameOperatorVersion
netboxeq3.5.1

0.001 Low

EPSS

Percentile

23.5%

Related for PRION:CVE-2023-33791