CVE-2024-56915

Netbox Community v4.1.7 and fixed in v.4.2.2 is vulnerable to Cross Site Scripting XSS via the RSS feed widget...

CVE-2024-56915

creationtimestamp| type| source ---|---|--- 2025-06-26 14:51:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19607 2025-06-26 18:31:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsjr4ulj4t2i...

CVE-2024-56915

Netbox Community v4.1.7 and fixed in v.4.2.2 is vulnerable to Cross Site Scripting XSS via the RSS feed widget...

CVE-2024-56915

Netbox Community versions v4.1.7 through v4.2.1 are vulnerable to a Cross-Site Scripting (XSS) flaw in the RSS feed widget . An attacker capable of populating the RSS feed can inject malicious JavaScript, which will execute in the context of another user's session. To remediate this issue, users ...