744 matches found
Nautobot: Stored cross-site scripting (XSS) in object create/edit form help text
Impact What kind of vulnerability is it? Who is impacted? It has two related instances that share the same root cause: a user-controlled model field is assigned verbatim to a form field's helptext, which is rendered with Django's |safe filter renderfield.html, bypassing auto-escaping. In both cas...
5.4CVSS
SaveExploits0References6Affected Software1
20