{"action":"Upgrade nautobot to 1.6.10 or later.","affected":[{"fixed":"2.1.2","introduced":"2.0.0"},{"fixed":"1.6.10","introduced":"0"}],"component":"nautobot","cve_ids":["CVE-2024-23345"],"ecosystem":"PyPI","epss":0.00433,"exploited":false,"fixed_versions":["2.1.2","1.6.10"],"ghsa_id":"GHSA-v4xv-795h-rv4h","id":"tcs_01M5KFZ79SA5JW023QN1Z0R46Y","modified_at":"2026-09-10T03:50:09.620510398Z","published_at":"2024-01-23T14:44:22Z","references":["https://osv.dev/vulnerability/GHSA-v4xv-795h-rv4h","https://github.com/nautobot/nautobot/security/advisories/GHSA-v4xv-795h-rv4h","https://nvd.nist.gov/vuln/detail/CVE-2024-23345","https://github.com/nautobot/nautobot/pull/5133","https://github.com/nautobot/nautobot/pull/5134","https://github.com/nautobot/nautobot/commit/17effcbe84a72150c82b138565c311bbee357e80","https://github.com/nautobot/nautobot/commit/64312a4297b5ca49b6cdedf477e41e8e4fd61cce","https://github.com/nautobot/nautobot","https://github.com/pypa/advisory-database/tree/main/vulns/nautobot/PYSEC-2024-16.yaml"],"severity":{"label":"high","score":7.1},"sources":[{"source":"osv","source_id":"GHSA-v4xv-795h-rv4h","url":"https://osv.dev/vulnerability/GHSA-v4xv-795h-rv4h"}],"summary":"XSS potential in rendered Markdown fields (comments, description, notes, etc.)"}