CVE-2023-36234

Опубликовано: 20 сент. 2023

Источник: debian

Описание

Cross Site Scripting (XSS) vulnerability in Netbox 3.5.1, allows attackers to execute arbitrary code via Name field in device-roles/add function.

Пакет	Статус	Версия исправления	Релиз	Тип
netbox	itp			package

CVE-2023-36234

CVSS3: 5.4

nvd

больше 2 лет назад

Cross Site Scripting (XSS) vulnerability in Netbox 3.5.1, allows attackers to execute arbitrary code via Name field in device-roles/add function.

GHSA-w5h6-8xc7-vp2c

CVSS3: 5.4

github

больше 2 лет назад

Cross Site Scripting (XSS) vulnerability in Netbox 3.5.1, allows attackers to execute arbitrary code via Name field in device-roles/add function.