4 matches found
nautobot-chatops-arista-cloudvision (>=1.0.1a0, <=1.3.0), nautobot-chatops-meraki (>=1.1.0, <=1.2.0) +2 more potentially affected by CVE-2024-32979 via nautobot (1.5.16)
nautobot PYPI version 1.5.16 is affected by a known vulnerability. The following packages have a transitive dependency on nautobot and may be impacted: - nautobot-chatops-arista-cloudvision =1.0.1a0, =1.1.0, =1.5.0, =1.6.0 Source cves: CVE-2024-32979 Source advisory: MEND:CVE-2024-32979...
CVE-2024-32979 Reflected Cross-site Scripting potential in all object list views in Nautobot
Nautobot is a Network Source of Truth and Network Automation Platform built as a web application atop the Django Python framework with a PostgreSQL or MySQL database. It was discovered that due to improper handling and escaping of user-provided query parameters, a maliciously crafted Nautobot URL...
CVE-2024-32979 Reflected Cross-site Scripting potential in all object list views in Nautobot
Nautobot is a Network Source of Truth and Network Automation Platform built as a web application atop the Django Python framework with a PostgreSQL or MySQL database. It was discovered that due to improper handling and escaping of user-provided query parameters, a maliciously crafted Nautobot URL...
nautobot-chatops-arista-cloudvision (>=1.0.1a0, <=1.3.0), nautobot-chatops-meraki (>=1.1.0, <=1.2.0) +2 more potentially affected by CVE-2024-32979 via nautobot (1.5.16)
nautobot PYPI version 1.5.16 is affected by a known vulnerability. The following packages have a transitive dependency on nautobot and may be impacted: - nautobot-chatops-arista-cloudvision =1.0.1a0, =1.1.0, =1.5.0, =1.6.0 Source cves: CVE-2024-32979 Source advisory: GHSA-JXGR-GCJ5-CQQG...