CVE-2025-69848-security-advisories

Reflected XSS in NetBox ProtectedError Handling CVE-2025-69848 Overview NetBox is an open-source infrastructure resource modeling and IP address management platform. A reflected cross-site scripting XSS vulnerability exists in the ProtectedError exception handling logic. When a delete operation...

CVE-2025-69848

NetBox contains a reflected XSS in ProtectedError handling within versions 2.11.0–3.7.x. Object names are injected into HTML error messages without proper escaping, allowing user-controlled content to be rendered in the web UI when a delete operation fails due to protected relationships. Impact i...