CVE-2023-37625

Опубликовано: 10 авг. 2023

Источник: nvd

CVSS3: 5.4

EPSS Низкий

Описание

A stored cross-site scripting (XSS) vulnerability in Netbox v3.4.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Custom Link templates.

Ссылки

https://github.com/benjaminpsinclair/Netbox-CVE
Exploit
Third Party Advisory
https://github.com/benjaminpsinclair/Netbox-CVE-2023-37625
Exploit
Third Party Advisory
https://github.com/netbox-community/netbox/issues/12205
Issue Tracking
Vendor Advisory
https://github.com/benjaminpsinclair/Netbox-CVE
Exploit
Third Party Advisory
https://github.com/benjaminpsinclair/Netbox-CVE-2023-37625
Exploit
Third Party Advisory
https://github.com/netbox-community/netbox/issues/12205
Issue Tracking
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:netbox:netbox:3.4.7:*:*:*:*:*:*:*

EPSS

Процентиль: 82%

0.01634

Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVE-2023-37625

CVSS3: 5.4

debian

больше 2 лет назад

A stored cross-site scripting (XSS) vulnerability in Netbox v3.4.7 all ...

GHSA-p3vp-cgp2-gqqj

CVSS3: 5.4

github

больше 2 лет назад

A stored cross-site scripting (XSS) vulnerability in Netbox v3.4.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Custom Link templates.

EPSS

Процентиль: 82%

0.01634

Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79