CVE-2024-56915

6.5

MEDIUMCVSS v3

Published

June 26, 2025

Affected

6 projects

Assigned by

MITRE

Severity scale

010

Description

Netbox Community v4.1.7 and fixed in v.4.2.2 is vulnerable to Cross Site Scripting (XSS) via the RSS feed widget.

netbox-community/netbox

GitHubThe premier source of truth powering network automation. Open source under Apache 2. Try NetBox Cloud free: https://netboxlabs.com/products/free-netbox-cloud/

>= 4.1.7, < 4.2.2NVD

netboxcommunity/netbox

Docker HubHere are the community-maintained Docker images of Netbox.

>= 4.1.7, < 4.2.2NVD

netbox

More on this CVE

NVD↗GitHub Advisory↗

Python Package IndexA python simple and flexible CLI tool used to network testing.

>= 4.1.7, < 4.2.2NVD

Hellboycc/netbox

GitHubA simple and flexible CLI tool for network

>= 4.1.7, < 4.2.2NVD

netbox

NPMa spider do something for internet

>= 4.1.7, < 4.2.2NVD

NetBox

NuGet GalleryProvides common simple helper functions to accelerate .NET development. Those vary by complexity and nature and include a lot of extension methods to calculate hashes (md5, crypto), string operations, short guids, string encoding, collection extensions, CSV support and many more.

>= 4.1.7, < 4.2.2NVD

Security Advisories

CVE-2024-56915

Description

More on this CVE