CVE-2025-49143

creationtimestamp| type| source ---|---|--- 2025-06-10 17:56:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrbhpiyk3l2e 2025-06-10 18:33:07+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17956...

CVE-2025-49143 Nautobot may allows uploaded media files to be accessible without authentication

Nautobot is a Network Source of Truth and Network Automation Platform. Prior to v2.4.10 and v1.6.32 , files uploaded by users to Nautobot's MEDIAROOT directory, including DeviceType image attachments as well as images attached to a Location, Device, or Rack, are served to users via a URL endpoint...