CVE-2024-36112

Nautobot is a Network Source of Truth and Network Automation Platform. A user with permissions to view Dynamic Group records "extras.viewdynamicgroup" permission can use the Dynamic Group detail UI view "/extras/dynamic-groups//" and/or the members REST API view...

CVE-2024-36112: Improper Handling of Insufficient Permissions or Privileges

Nautobot is a Network Source of Truth and Network Automation Platform. A user with permissions to view Dynamic Group records extras.viewdynamicgroup permission can use the Dynamic Group detail UI view /extras/dynamic-groups/ / and/or the members REST API view /api/extras/dynamic-groups/ /members/...