Lucene search
+L

744 matches found

Github Security Blog
Github Security Blog
added 2026/09/22 8:37 p.m.1 views

Nautobot: Stored cross-site scripting (XSS) in object create/edit form help text

Impact What kind of vulnerability is it? Who is impacted? It has two related instances that share the same root cause: a user-controlled model field is assigned verbatim to a form field's helptext, which is rendered with Django's |safe filter renderfield.html, bypassing auto-escaping. In both cas...

5.4CVSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder