Описание
A vulnerability in Netbox v3.5.1 allows unauthenticated attackers to execute queries against the GraphQL database, granting them access to sensitive data stored in the database. NOTE: the vendor disputes this because the reporter's only query was for the schema of the API, which is public; queries for database objects would have been denied.
Ссылки
- ExploitIssue Tracking
- ExploitIssue Tracking
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:netbox:netbox:3.5.1:*:*:*:*:*:*:*
EPSS
Процентиль: 45%
0.00225
Низкий
9.1 Critical
CVSS3
Дефекты
NVD-CWE-noinfo
Связанные уязвимости
CVSS3: 9.1
debian
больше 2 лет назад
A vulnerability in Netbox v3.5.1 allows unauthenticated attackers to e ...
CVSS3: 9.1
github
больше 2 лет назад
A vulnerability in Netbox v3.5.1 allows unauthenticated attackers to execute queries against the GraphQL database, granting them access to sensitive data stored in the database.
EPSS
Процентиль: 45%
0.00225
Низкий
9.1 Critical
CVSS3
Дефекты
NVD-CWE-noinfo