CVE-2019-25011

5.4

MEDIUMCVSS v3

Published

December 31, 2020

CVSS v2

3.5 LOW

Affected

3 projects

Assigned by

MITRE

Severity scale

010

Description

NetBox through 2.6.2 allows an Authenticated User to conduct an XSS attack against an admin via a GFM-rendered field, as demonstrated by /dcim/sites/add/ comments.

netbox-community/netbox

GitHubThe premier source of truth powering network automation. Open source under Apache 2. Try NetBox Cloud free: https://netboxlabs.com/products/free-netbox-cloud/

= *, <= 2.6.2NVD

netbox

NPMa spider do something for internet

= *, <= 2.6.2NVD

NetBox

More on this CVE

NVD↗GitHub Advisory↗

NuGet Gallery

Provides common simple helper functions to accelerate .NET development. Those vary by complexity and nature and include a lot of extension methods to calculate hashes (md5, crypto), string operations, short guids, string encoding, collection extensions, CSV support and many more.

= *, <= 2.6.2NVD

Security Advisories

CVE-2019-25011

Description

More on this CVE