1 matches found
CVE-2023-25657: Improper Control of Generation of Code
Nautobot is a Network Source of Truth and Network Automation Platform. All users of Nautobot versions earlier than 1.5.7 are impacted by a remote code execution vulnerability. Nautobot did not properly sandbox Jinja2 template rendering. In Nautobot 1.5.7 has enabled sandboxed environments for the...
9.8CVSS6.2AI score0.01526EPSS
SaveExploits0References2
20