495 matches found
CVE-2023-36234
NetBox 3.5.1 contains a Cross-Site Scripting (XSS) vulnerability exploitable via the Name field in device-roles/add. The root cause is not explicitly detailed in the provided documents beyond the XSS issue. Impact per the CVE metrics indicates limited impact with a Medium severity (CVSS v3.1: AV:...
CVE-2023-36234
Cross Site Scripting XSS vulnerability in Netbox 3.5.1, allows attackers to execute arbitrary code via Name field in device-roles/add function...
CVE-2023-37625
A stored cross-site scripting XSS vulnerability in Netbox v3.4.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Custom Link templates...
CVE-2023-37625
A stored cross-site scripting XSS vulnerability in Netbox v3.4.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Custom Link templates...
PYSEC-2023-141
A stored cross-site scripting XSS vulnerability in Netbox v3.4.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Custom Link templates...
Cross site scripting
A stored cross-site scripting XSS vulnerability in Netbox v3.4.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Custom Link templates...
PYSEC-2023-141
A stored cross-site scripting XSS vulnerability in Netbox v3.4.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Custom Link templates...
CVE-2023-37625
A stored cross-site scripting XSS vulnerability in Netbox v3.4.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Custom Link templates...
Netbox Cross-Site Scripting Vulnerability
NetBox is a Django, PostgreSql based tool for IP Address Management IPAM and Data Center Infrastructure Management DCIM from the NetBox community. A security vulnerability exists in Netbox version v3.4.7, which originated from a vulnerability that allows attackers to execute arbitrary web script ...
PT-2023-26047 · Netbox · Netbox
Name of the Vulnerable Software and Affected Versions: Netbox version 3.4.7 Description: A stored cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Custom Link templates. This enables attackers to potentially manipulat...
CVE-2023-37625
CVE-2023-37625 describes a stored cross-site scripting (XSS) vulnerability in NetBox v3.4.7, exploitable via a crafted payload injected into the Custom Link templates. The available sources (NVD/OSV, etc.) consistently identify the affected software as NetBox 3.4.7 and the vulnerability as stored...
CVE-2023-37625
A stored cross-site scripting XSS vulnerability in Netbox v3.4.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Custom Link templates...
CVE-2023-34565
Netbox 3.5.1 is vulnerable to Cross Site Scripting XSS in the "Create Wireless LAN Groups" function...
CVE-2023-34565
Netbox 3.5.1 is vulnerable to Cross Site Scripting XSS in the "Create Wireless LAN Groups" function...
Cross site scripting
Netbox 3.5.1 is vulnerable to Cross Site Scripting XSS in the "Create Wireless LAN Groups" function...
PT-2023-24923 · Netbox · Netbox
Name of the Vulnerable Software and Affected Versions: Netbox version 3.5.1 Description: The issue is related to Cross Site Scripting XSS in the "Create Wireless LAN Groups" function. This allows for malicious scripts to be injected into the website, potentially leading to unauthorized access or...
Netbox 跨站脚本漏洞
NetBox is a Django, PostgreSql based tool for IP Address Management IPAM and Data Center Infrastructure Management DCIM from the NetBox community. A security vulnerability exists in Netbox version 3.5.1 that stems from a stored cross-site scripting XSS vulnerability in the Create Wireless LAN...
CVE-2023-34565
Netbox 3.5.1 is vulnerable to Cross Site Scripting XSS in the "Create Wireless LAN Groups" function...
CVE-2023-34565
The CVE-2023-34565 entry affects NetBox 3.5.1, with a stored Cross-Site Scripting (XSS) vulnerability in the Create Wireless LAN Groups function. According to multiple sources, NetBox 3.5.1 is vulnerable to XSS in that feature, labeled as stored XSS in CNNVD/CVE records, and the vulnerability has...