CVE-2023-50263

2 advisories.

PyPI/nautobot CVE-2023-50263: low 3.7

Unauthenticated db-file-storage views

Action: Upgrade nautobot to 1.6.7 or later.

pip install nautobot==1.6.7

pip install nautobot==2.0.6

Affected

introduced	fixed	last affected
1.1.0	1.6.7	-
2.0.0	2.0.6	-

Fixed versions

1.6.7

2.0.6

Sources

osv: GHSA-75mc-3pjc-727q
https://github.com/nautobot/nautobot/security/advisories/GHSA-75mc-3pjc-727q
https://nvd.nist.gov/vuln/detail/CVE-2023-50263
https://github.com/nautobot/nautobot/pull/4959
https://github.com/nautobot/nautobot/pull/4964
https://github.com/nautobot/nautobot/commit/458280c359a4833a20da294eaf4b8d55edc91cee
https://github.com/nautobot/nautobot/commit/5e2ba9e8ac0840b1c44eb1a8ea3c0bd2c68e4f80
https://github.com/nautobot/nautobot/commit/7c4cf3137f45f1541f09f2f6a7f8850cd3a2eaee
https://github.com/nautobot/nautobot
https://github.com/pypa/advisory-database/tree/main/vulns/nautobot/PYSEC-2023-286.yaml
https://github.com/victor-o-silva/db_file_storage/blob/master/db_file_storage/views.py

CVE-2023-50263 · published 2023-12-13T13:35:48Z · modified 2026-09-10T03:49:59.415839617Z · JSON

PyPI/nautobot CVE-2023-50263: medium 5.3

Nautobot is a Network Source of Truth and Network Automation Platform built as a web application atop the Django Python framework with a PostgreSQL or MySQL database. In Nautobot 1.x and 2.0.x prior t