CVE-2024-40738

A cross-site scripting (XSS) vulnerability exists in NetBox v4.0.3 due to the lack of effective filtering and escaping of user-supplied data. An attacker can inject arbitrary HTML code or web scripts by providing a crafted payload into the Name parameter at the /dcim/console-ports/{id}/edit/ endp...

CVE-2024-40735

CVE-2024-40735 : A cross-site scripting (XSS) vulnerability affects NetBox v4.0.3. The issue arises from lack of proper filtering/escaping of user-supplied data in the Name parameter of the page /dcim/power-outlets/{id}/edit/ , allowing an attacker to inject arbitrary HTML/JS. The CVSS v3.1 base ...

CVE-2024-40734

A cross-site scripting XSS vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter at /dcim/front-ports/add/...

PT-2024-29012

Name of the Vulnerable Software and Affected Versions netbox version 4.0.3 Description A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter at "/dcim/front-ports/add/". Recommendations For netbox version...

CVE-2024-40731

A cross-site scripting XSS vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter at /dcim/rear-ports/id/edit/...

CVE-2024-40741

A cross-site scripting XSS vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the circuit ID parameter at /circuits/circuits/id/edit/...

CVE-2024-40728

A cross-site scripting XSS vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter at /dcim/console-server-ports/id/edit/...

CVE-2024-40739

A cross-site scripting XSS vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter at /dcim/power-feeds/add...

CVE-2024-40734

A cross-site scripting XSS vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter at /dcim/front-ports/add/...

CVE-2024-38972

A cross-site scripting XSS vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter at /dcim/power-ports/add/...

CVE-2024-40728

A cross-site scripting XSS vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter at /dcim/console-server-ports/id/edit/...

CVE-2024-40732

A cross-site scripting XSS vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter at /dcim/rear-ports/add/...

CVE-2024-40732

A cross-site scripting XSS vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter at /dcim/rear-ports/add/...

CVE-2024-40729

NetBox v4.0.3 is vulnerable to a cross-site scripting (XSS) flaw caused by a lack of effective filtering and escaping of user-supplied data. Attackers can exploit this by injecting a crafted payload into the Name parameter at the /dcim/interfaces/add/ location to execute arbitrary web scripts or ...

CVE-2024-40730

NetBox v4.0.3 contains an XSS vulnerability: a crafted payload placed in the Name parameter at /dcim/interfaces/{id}/edit/ can execute arbitrary HTML/JS in authenticated user sessions. The issue stems from insufficient input filtering/escaping in that endpoint. Impact is described as cross-site s...

CVE-2024-40734

NetBox

CVE-2024-38972

NetBox vulnerability CVE-2024-38972 is an XSS issue in version 4.0.3. The root cause is lack of proper filtering/escaping of user-supplied data in the Name parameter at the /dcim/power-ports/add/ endpoint, allowing injection of arbitrary HTML/script code. Affected product: NetBox v4.0.3 (DCIM/IPA...

CVE-2024-40731

A cross-site scripting XSS vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter at /dcim/rear-ports/id/edit/...

CVE-2024-40739

NetBox v4.0.3 contains a cross-site scripting (XSS) vulnerability that allows an attacker to inject arbitrary HTML/script via the Name parameter on the /dcim/power-feeds/add page. Root cause appears to be insufficient input filtering/escaping of user-supplied data in that location (as reported by...

PT-2024-29009 · Netbox · Netbox

Name of the Vulnerable Software and Affected Versions: netbox version 4.0.3 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter at "/dcim/rear-ports/id/edit/". Recommendations: For netbox...