Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/05/28 4:57 p.m.47 views

CVE-2026-44798 Nautobot: GitRepository.current_head field should not be writable through REST API

Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.33 and 3.1.2, a user with access to add/change a GitRepository record could use the REST API to directly set the currenthead field on the record, which was not intended to be user-editable. Doing so could cause...

7.1CVSS0.00277EPSS
SaveExploits0References5
Rows per page
Query Builder