Lucene search
PRIOn knowledge basePRION:CVE-2024-23345HistoryJan 23, 2024 - 12:15 a.m.
Cross site scripting
2024-01-2300:15:00
PRIOn knowledge base
www.prio-n.com
4
nautobot
network source of truth
network automation platform
cross-site scripting
vulnerability
input sanitization
markdown rendering
xss attacks
Nautobot is a Network Source of Truth and Network Automation Platform built as a web application. All users of Nautobot versions earlier than 1.6.10 or 2.1.2 are potentially impacted by a cross-site scripting vulnerability. Due to inadequate input sanitization, any user-editable fields that support Markdown rendering, including are potentially susceptible to cross-site scripting (XSS) attacks via maliciously crafted data. This issue is fixed in Nautobot versions 1.6.10 and 2.1.2.
References
Related
osv
osv
PYSEC-2024-16
2024-01-23 00:15:00
CVE-2024-23345
2024-01-23 00:15:26
nvd
nvd
CVE-2024-23345
2024-01-23 00:15:26
cve
cve
CVE-2024-23345
2024-01-23 00:15:26
github
github
cvelist
cvelist
CVE-2024-23345 Nautobot has XSS potential in rendered Markdown fields
2024-01-22 23:14:52
veracode
veracode
Cross-site Scripting (XSS)
2024-01-24 06:02:11