{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"4.1.0-NA"}],"component":"pynetbox","cve_ids":["CVE-2024-47226"],"ecosystem":"PyPI","epss":0.00309,"exploited":false,"fixed_versions":[],"id":"tcs_01M5KGN5EP4KT52MB7YC4HMND0","modified_at":"2026-07-13T07:15:41.279397016Z","published_at":"2024-09-22T02:15:02.797Z","references":["https://osv.dev/vulnerability/PYSEC-2024-325","https://github.com/netbox-community/netbox/releases/tag/v4.1.0","https://github.com/tu3n4nh/netbox/issues/1"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"PYSEC-2024-325","url":"https://osv.dev/vulnerability/PYSEC-2024-325"}],"summary":"A stored cross-site scripting (XSS) vulnerability exists in NetBox 4.1.0 within the \"Configuration History\" feature of the \"Admin\" panel via a /core/config-revisions/ Add action. An authenticated user"}