Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qxww-c4qm-jpg8

Опубликовано: 16 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

Cross Site scripting vulnerability (XSS) in NetBox 4.3.5 "comment" field on object forms. An attacker can inject arbitrary HTML, which will be rendered in the web UI when viewed by other users. This could potentially lead to user interface redress attacks or be escalated to XSS in certain contexts.

Cross Site scripting vulnerability (XSS) in NetBox 4.3.5 "comment" field on object forms. An attacker can inject arbitrary HTML, which will be rendered in the web UI when viewed by other users. This could potentially lead to user interface redress attacks or be escalated to XSS in certain contexts.

EPSS

Процентиль: 7%
0.00175
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
nvd
6 месяцев назад

Cross Site scripting vulnerability (XSS) in NetBox 4.3.5 "comment" field on object forms. An attacker can inject arbitrary HTML, which will be rendered in the web UI when viewed by other users. This could potentially lead to user interface redress attacks or be escalated to XSS in certain contexts.

CVSS3: 6.1
debian
6 месяцев назад

Cross Site scripting vulnerability (XSS) in NetBox 4.3.5 "comment" fie ...

EPSS

Процентиль: 7%
0.00175
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79