Lucene search
+L

1 matches found

OSV
OSV
added 2023/12/22 4:48 p.m.36 views

CVE-2023-51649 Nautobot missing object-level permissions enforcement when running Job Buttons

Nautobot is a Network Source of Truth and Network Automation Platform built as a web application atop the Django Python framework with a PostgreSQL or MySQL database. When submitting a Job to run via a Job Button, only the model-level extras.runjob permission is checked i.e., does the user have...

3.5CVSS4.6AI score
SaveExploits0References6
Rows per page
Query Builder