CVE-2024-32979 Reflected Cross-site Scripting potential in all object list views in Nautobot

Nautobot is a Network Source of Truth and Network Automation Platform built as a web application atop the Django Python framework with a PostgreSQL or MySQL database. It was discovered that due to improper handling and escaping of user-provided query parameters, a maliciously crafted Nautobot URL...

CVE-2024-32979 Reflected Cross-site Scripting potential in all object list views in Nautobot

Nautobot is a Network Source of Truth and Network Automation Platform built as a web application atop the Django Python framework with a PostgreSQL or MySQL database. It was discovered that due to improper handling and escaping of user-provided query parameters, a maliciously crafted Nautobot URL...

nautobot-chatops-arista-cloudvision (>=1.0.1 <=1.3.0), nautobot-chatops-meraki (>=1.1.0 <=1.2.0) +2 more potentially affected by CVE-2024-32979 via nautobot (=1.5.16)

nautobot PYPI version =1.5.16 is affected by a known vulnerability. The following packages have a transitive dependency on nautobot and may be impacted: - nautobot-chatops-arista-cloudvision =1.0.1, =1.1.0, =1.5.0, =1.6.0 Source cves: CVE-2024-32979 Source advisory: OSV:GHSA-JXGR-GCJ5-CQQG...

nautobot-device-resources (=1.0.0), nautobot-ssot (>=2.0.0 <=2.5.0) potentially affected by CVE-2024-32979 via nautobot (>=2.0.0 <=2.2.0)

nautobot PYPI version =2.0.0, =2.0.0, =2.5.0 Source cves: CVE-2024-32979 Source advisory: OSV:GHSA-JXGR-GCJ5-CQQG...