4 matches found
CVE-2024-47226
A stored cross-site scripting XSS vulnerability exists in NetBox 4.1.0 within the "Configuration History" feature of the "Admin" panel via a /core/config-revisions/ Add action. An authenticated user can inject arbitrary JavaScript or HTML into the "Top banner" field. NOTE: Multiple third parties...
netbox-kafka-consumer (>=1.0.1, <=1.0.9) potentially affected by CVE-2024-47226 via pynetbox (>=4.0.6, <=4.0.8)
pynetbox PYPI version =4.0.6, =1.0.1, =1.0.9 Source cves: CVE-2024-47226 Source advisory: OSV:PYSEC-2024-325...
CVE-2024-47226
A stored cross-site scripting XSS vulnerability exists in NetBox 4.1.0 within the "Configuration History" feature of the "Admin" panel via a /core/config-revisions/ Add action. An authenticated user can inject arbitrary JavaScript or HTML into the "Top banner" field. NOTE: Multiple third parties...
CVE-2024-47226
A stored cross-site scripting XSS vulnerability exists in NetBox 4.1.0 within the "Configuration History" feature of the "Admin" panel via a /core/config-revisions/ Add action. An authenticated user can inject arbitrary JavaScript or HTML into the "Top banner" field. NOTE: Multiple third parties...