PyPI/nautobot CVE-2023-50263: low 3.7, EPSS 0.75%

Unauthenticated db-file-storage views

Action: Upgrade nautobot to 1.6.7 or later.

pip install nautobot==1.6.7

pip install nautobot==2.0.6

Affected

Fixed versions

Sources

• osv: GHSA-75mc-3pjc-727q
• https://github.com/nautobot/nautobot/security/advisories/GHSA-75mc-3pjc-727q
• https://nvd.nist.gov/vuln/detail/CVE-2023-50263
• https://github.com/nautobot/nautobot/pull/4959
• https://github.com/nautobot/nautobot/pull/4964
• https://github.com/nautobot/nautobot/commit/458280c359a4833a20da294eaf4b8d55edc91cee
• https://github.com/nautobot/nautobot/commit/5e2ba9e8ac0840b1c44eb1a8ea3c0bd2c68e4f80
• https://github.com/nautobot/nautobot/commit/7c4cf3137f45f1541f09f2f6a7f8850cd3a2eaee
• https://github.com/nautobot/nautobot
• https://github.com/pypa/advisory-database/tree/main/vulns/nautobot/PYSEC-2023-286.yaml
• https://github.com/victor-o-silva/db_file_storage/blob/master/db_file_storage/views.py

CVE-2023-50263 · published 2023-12-13T13:35:48Z · modified 2026-09-10T03:49:59.415839617Z · JSON