3 matches found
EUVD-2024-55003
Malicious code in bioql PyPI...
6.1CVSS5.4AI score0.00323EPSS
SaveExploits1References3
CVE-2024-56916
In Netbox Community 4.1.7, once authenticated, Configuration History Add"is vulnerable to cross-site scripting XSS due to the "current value field rendering user supplied html. An authenticated attacker can leverage this to add malicious JavaScript to the any banner field. Once a victim edits a...
6.1CVSS5.5AI score0.00323EPSS
SaveExploits1References5
PT-2024-32485
Name of the Vulnerable Software and Affected Versions NetBox version 4.1.0 Description A stored cross-site scripting XSS issue exists within the "Configuration History" feature of the "Admin" panel via the "/core/config-revisions/" endpoint, specifically through the "Add" action. An authenticated...
5.4CVSS5.6AI score0.00309EPSS
SaveExploits1References11
20