Описание
Cross Site scripting vulnerability (XSS) in NetBox 4.3.5 "comment" field on object forms. An attacker can inject arbitrary HTML, which will be rendered in the web UI when viewed by other users. This could potentially lead to user interface redress attacks or be escalated to XSS in certain contexts.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:netbox:netbox:4.3.5:*:*:*:*:*:*:*
EPSS
Процентиль: 7%
0.00175
Низкий
6.1 Medium
CVSS3
Дефекты
CWE-79
Связанные уязвимости
CVSS3: 6.1
debian
6 месяцев назад
Cross Site scripting vulnerability (XSS) in NetBox 4.3.5 "comment" fie ...
CVSS3: 6.1
github
6 месяцев назад
Cross Site scripting vulnerability (XSS) in NetBox 4.3.5 "comment" field on object forms. An attacker can inject arbitrary HTML, which will be rendered in the web UI when viewed by other users. This could potentially lead to user interface redress attacks or be escalated to XSS in certain contexts.
EPSS
Процентиль: 7%
0.00175
Низкий
6.1 Medium
CVSS3
Дефекты
CWE-79