CVE-2023-33788

A stored cross-site scripting XSS vulnerability in the Create Providers /circuits/providers/ function of Netbox v3.5.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field...

CVE-2023-33786

NetBox CVE-2023-33786 is a stored XSS in the Create Circuit Types function (Name field) affecting NetBox v3.5.1. An attacker can inject a crafted payload to execute arbitrary web scripts or HTML. The connected records confirm the vulnerability description across multiple feeds; no exploitation st...

CVE-2023-33786

A stored cross-site scripting XSS vulnerability in the Create Circuit Types /circuits/circuit-types/ function of Netbox v3.5.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field...

CVE-2023-33786

A stored cross-site scripting XSS vulnerability in the Create Circuit Types /circuits/circuit-types/ function of Netbox v3.5.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field...

PT-2023-24489

Name of the Vulnerable Software and Affected Versions Netbox version 3.5.1 Description A stored cross-site scripting XSS issue exists in the Create Circuit Types function, specifically at the /circuits/circuit-types/ API endpoint, allowing attackers to execute arbitrary web scripts or HTML by...

CVE-2023-33786: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the Create Circuit Types /circuits/circuit-types/ function of Netbox v3.5.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field...

CVE-2023-33799

NetBox 3.5.1 contains a stored XSS in the Create Contacts API at /tenancy/contacts/ triggered by crafting the Name field. Multiple sources (NVD/Red Hat/OSV/others) confirm the vulnerability description; no explicit patch/version fix is provided in the documents. Some sources (PT-2023-24502) recom...

CVE-2023-33785

NetBox v3.5.1 is affected by a stored XSS in the Create Rack Roles endpoint (/dcim/rack-roles/). The vulnerability arises from injecting a crafted payload into the Name field, enabling execution of arbitrary web scripts/HTML. Connections documents confirm the issue description but do not provide ...

PT-2023-24499 · Netbox · Netbox

Name of the Vulnerable Software and Affected Versions: Netbox version 3.5.1 Description: A vulnerability allows unauthenticated attackers to execute queries against the GraphQL database, potentially granting them access to sensitive data stored in the database. However, the vendor disputes this,...

CVE-2023-33800

CVE-2023-33800 is a stored XSS in NetBox v3.5.1 affecting the Create Regions endpoint (/dcim/regions/). The Name field can be injected to execute arbitrary scripts/HTML. Public sources consistently describe a stored XSS applicable to NetBox 3.5.1, with a CVSS v3.1 base score of 5.4 (Medium) and a...

CVE-2023-33787

A stored cross-site scripting XSS vulnerability in the Create Tenant Groups /tenancy/tenant-groups/ function of Netbox v3.5.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field...

NetBox cross-site scripting vulnerabilities

NetBox is a Django, PostgreSql based tool for IP Address Management IPAM and Data Center Infrastructure Management DCIM from the NetBox community. A security vulnerability exists in NetBox version v3.5.1, which stems from the presence of a stored cross-site scripting XSS vulnerability that allows...

PT-2023-24492 · Netbox · Netbox

Name of the Vulnerable Software and Affected Versions: Netbox version 3.5.1 Description: A stored cross-site scripting XSS issue exists in the Create Contact Groups function, specifically at the /tenancy/contact-groups/ API endpoint, allowing attackers to execute arbitrary web scripts or HTML by...

CVE-2023-33789

Summary: CVE-2023-33789 is a stored XSS vulnerability affecting NetBox 3.5.1, exploitable via the Name field in the Create Contact Groups endpoint at /tenancy/contact-groups/. The issue arises from the injection of crafted payloads that can execute scripts/HTML when rendered. Public sources consi...

CVE-2023-33797

A stored cross-site scripting XSS vulnerability in the Create Sites /dcim/sites/ function of Netbox v3.5.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field...

NetBox cross-site scripting vulnerabilities

NetBox is a Django, PostgreSql based tool for IP Address Management IPAM and Data Center Infrastructure Management DCIM from the NetBox community. A security vulnerability exists in NetBox version v3.5.1, which stems from a security issue in the Create Rack /dcim/rack/ feature, and can be exploit...

NetBox cross-site scripting vulnerabilities

NetBox is a Django, PostgreSql based tool for IP Address Management IPAM and Data Center Infrastructure Management DCIM from the NetBox community. A security vulnerability exists in NetBox version v3.5.1, which stems from the presence of a stored cross-site scripting XSS vulnerability that allows...

NetBox cross-site scripting vulnerabilities

NetBox is a Django, PostgreSql based tool for IP Address Management IPAM and Data Center Infrastructure Management DCIM from the NetBox community. A security vulnerability exists in NetBox version v3.5.1, which stems from the presence of a stored cross-site scripting XSS vulnerability that allows...

PT-2023-24494 · Netbox · Netbox

Name of the Vulnerable Software and Affected Versions: Netbox version 3.5.1 Description: A stored cross-site scripting XSS issue exists in the Create Provider Accounts function, specifically at the /circuits/provider-accounts/ API endpoint, allowing attackers to execute arbitrary web scripts or...

NetBox cross-site scripting vulnerabilities

NetBox is a Django, PostgreSql based tool for IP Address Management IPAM and Data Center Infrastructure Management DCIM from the NetBox community. A security vulnerability exists in NetBox version v3.5.1, which stems from the presence of a stored cross-site scripting XSS vulnerability that allows...