CVE-2023-33796

9.1

CRITICALCVSS v3

Published

May 24, 2023

Affected

5 projects

Assigned by

MITRE

Severity scale

010

Description

A vulnerability in Netbox v3.5.1 allows unauthenticated attackers to execute queries against the GraphQL database, granting them access to sensitive data stored in the database. NOTE: the vendor disputes this because the reporter's only query was for the schema of the API, which is public; queries for database objects would have been denied.

netbox-community/netbox

GitHubThe premier source of truth powering network automation. Open source under Apache 2. Try NetBox Cloud free: https://netboxlabs.com/products/free-netbox-cloud/

= 3.5.1NVD

netbox

Python Package IndexA python simple and flexible CLI tool used to network testing.

= 3.5.1NVD

Hellboycc/netbox

More on this CVE

NVD↗GitHub Advisory↗

GitHubA simple and flexible CLI tool for network

= 3.5.1NVD

netbox

NPMa spider do something for internet

= 3.5.1NVD

NetBox

NuGet GalleryProvides common simple helper functions to accelerate .NET development. Those vary by complexity and nature and include a lot of extension methods to calculate hashes (md5, crypto), string operations, short guids, string encoding, collection extensions, CSV support and many more.

= 3.5.1NVD

Security Advisories

CVE-2023-33796

Description

More on this CVE