CVE-2024-47226
1 advisory.
PyPI/pynetbox CVE-2024-47226: medium 5.4, EPSS 0.31%
A stored cross-site scripting (XSS) vulnerability exists in NetBox 4.1.0 within the "Configuration History" feature of the "Admin" panel via a /core/config-revisions/ Add action. An authenticated user
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 4.1.0-NA |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2024-325
- https://github.com/netbox-community/netbox/releases/tag/v4.1.0
- https://github.com/tu3n4nh/netbox/issues/1
CVE-2024-47226 · published · modified · JSON