{"action":"Upgrade nautobot to 1.6.8 or later.","affected":[{"fixed":"1.6.8","introduced":"1.5.14"},{"fixed":"2.1.0","introduced":"2.0.0"}],"component":"nautobot","cve_ids":["CVE-2023-51649"],"ecosystem":"PyPI","epss":0.00452,"exploited":false,"fixed_versions":["1.6.8","2.1.0"],"ghsa_id":"GHSA-vf5m-xrhm-v999","id":"tcs_01M5KFZZVJTXN70GSNNBF3VN80","modified_at":"2026-06-09T13:15:18.125980805Z","published_at":"2023-12-22T19:51:53Z","references":["https://osv.dev/vulnerability/GHSA-vf5m-xrhm-v999","https://github.com/nautobot/nautobot/security/advisories/GHSA-vf5m-xrhm-v999","https://nvd.nist.gov/vuln/detail/CVE-2023-51649","https://github.com/nautobot/nautobot/issues/4988","https://github.com/nautobot/nautobot/pull/4993","https://github.com/nautobot/nautobot/pull/4995","https://github.com/nautobot/nautobot/commit/3d964f996f4926126c1d7853ca87b2ff475997a2","https://github.com/nautobot/nautobot/commit/d33d0c15a36948c45244e5b5e10bc79b8e62de7f","https://github.com/nautobot/nautobot","https://github.com/pypa/advisory-database/tree/main/vulns/nautobot/PYSEC-2023-287.yaml"],"severity":{"label":"low","score":3.5},"sources":[{"source":"osv","source_id":"GHSA-vf5m-xrhm-v999","url":"https://osv.dev/vulnerability/GHSA-vf5m-xrhm-v999"}],"summary":"Nautobot missing object-level permissions enforcement when running Job Buttons"}