CVE-2023-36234

5.4

MEDIUMCVSS v3

Published

September 20, 2023

Affected

6 projects

Assigned by

MITRE

Severity scale

010

Description

Cross Site Scripting (XSS) vulnerability in Netbox 3.5.1, allows attackers to execute arbitrary code via Name field in device-roles/add function.

netbox-community/netbox

GitHubThe premier source of truth powering network automation. Open source under Apache 2. Try NetBox Cloud free: https://netboxlabs.com/products/free-netbox-cloud/

= 3.5.1NVD

netboxcommunity/netbox

Docker HubHere are the community-maintained Docker images of Netbox.

= 3.5.1NVD

netbox

More on this CVE

NVD↗GitHub Advisory↗

Python Package IndexA python simple and flexible CLI tool used to network testing.

= 3.5.1NVD

Hellboycc/netbox

GitHubA simple and flexible CLI tool for network

= 3.5.1NVD

netbox

NPMa spider do something for internet

= 3.5.1NVD

NetBox

NuGet GalleryProvides common simple helper functions to accelerate .NET development. Those vary by complexity and nature and include a lot of extension methods to calculate hashes (md5, crypto), string operations, short guids, string encoding, collection extensions, CSV support and many more.

= 3.5.1NVD

Security Advisories

CVE-2023-36234

Description

More on this CVE