33 matches found
CVE-2024-56916
In Netbox Community 4.1.7, once authenticated, Configuration History Addis vulnerable to cross-site scripting XSS due to the current value field rendering user supplied html. An authenticated attacker can leverage this to add malicious JavaScript to the any banner field. Once a victim edits a...
CVE-2024-56917: Improper Neutralization of Input During Web Page Generation
Netbox Community 4.1.7 is vulnerable to Cross Site Scripting XSS via the maintenance banner in maintenance mode...
CVE-2024-56916: Improper Neutralization of Input During Web Page Generation
In Netbox Community 4.1.7, once authenticated, Configuration History Addis vulnerable to cross-site scripting XSS due to the current value field rendering user supplied html. An authenticated attacker can leverage this to add malicious JavaScript to the any banner field. Once a victim edits a...
CVE-2024-56916
In Netbox Community 4.1.7, once authenticated, Configuration History Addis vulnerable to cross-site scripting XSS due to the current value field rendering user supplied html. An authenticated attacker can leverage this to add malicious JavaScript to the any banner field. Once a victim edits a...
CVE-2024-56917
Netbox Community 4.1.7 is vulnerable to Cross Site Scripting XSS via the maintenance banner in maintenance mode...
PT-2025-26758 · Unknown · Netbox Community
Name of the Vulnerable Software and Affected Versions: Netbox Community version 4.1.7 Description: The login page in Netbox Community is vulnerable to cross-site scripting XSS, allowing a privileged, authenticated attacker to exfiltrate user input from the login form. This issue enables the...
CVE-2024-56918
In Netbox Community 4.1.7, the login page is vulnerable to cross-site scripting XSS, which allows a privileged, authenticated attacker to exfiltrate user input from the login form...
CVE-2024-56916
In Netbox Community 4.1.7, once authenticated, Configuration History Addis vulnerable to cross-site scripting XSS due to the current value field rendering user supplied html. An authenticated attacker can leverage this to add malicious JavaScript to the any banner field. Once a victim edits a...
CVE-2024-56916
In Netbox Community version 4.1.7 , a stored cross-site scripting (XSS) vulnerability exists within the Configuration History > Add functionality. The root cause is the current value field rendering user-supplied HTML without proper sanitization. An authenticated attacker can inject malicious ...
CVE-2024-56918: Improper Neutralization of Input During Web Page Generation
In Netbox Community 4.1.7, the login page is vulnerable to cross-site scripting XSS, which allows a privileged, authenticated attacker to exfiltrate user input from the login form...
CVE-2024-56918
In Netbox Community 4.1.7, the login page is vulnerable to cross-site scripting XSS, which allows a privileged, authenticated attacker to exfiltrate user input from the login form...
CVE-2024-56917
Netbox Community version 4.1.7 is vulnerable to a Cross-Site Scripting (XSS) flaw located in the maintenance banner when the system is in maintenance mode . This vulnerability allows an authenticated attacker to inject malicious JavaScript into the banner, which then executes in the browser of an...