tocsin

CVE-2024-23345

2 advisories.

PyPI/nautobot CVE-2024-23345: high 7.1, EPSS 0.43%

XSS potential in rendered Markdown fields (comments, description, notes, etc.)

Action: Upgrade nautobot to 1.6.10 or later.

pip install nautobot==2.1.2
pip install nautobot==1.6.10

Affected

introducedfixedlast affected
2.0.02.1.2-
01.6.10-

Fixed versions

2.1.21.6.10

Sources

CVE-2024-23345 · published · modified · JSON

PyPI/nautobot CVE-2024-23345: medium 5.4, EPSS 0.43%

Nautobot is a Network Source of Truth and Network Automation Platform built as a web application. All users of Nautobot versions earlier than 1.6.10 or 2.1.2 are potentially impacted by a cross-site s

Action: Upgrade nautobot to 1.6.10 or later.

pip install nautobot==2.1.2
pip install nautobot==1.6.10

Affected

introducedfixedlast affected
01.6.10-
2.0.02.1.2-

Fixed versions

2.1.21.6.10

Sources

CVE-2024-23345 · published · modified · JSON