CVE-2024-56918

6.1

MEDIUMCVSS v3

Published

June 24, 2025

Affected

6 projects

Assigned by

MITRE

Severity scale

010

Description

In Netbox Community 4.1.7, the login page is vulnerable to cross-site scripting (XSS), which allows a privileged, authenticated attacker to exfiltrate user input from the login form.

netbox-community/netbox

GitHubThe premier source of truth powering network automation. Open source under Apache 2. Try NetBox Cloud free: https://netboxlabs.com/products/free-netbox-cloud/

>= 4.1.7, <= 4.2.1NVD

netboxcommunity/netbox

Docker HubHere are the community-maintained Docker images of Netbox.

>= 4.1.7, <= 4.2.1NVD

netbox

More on this CVE

NVD↗GitHub Advisory↗

Python Package IndexA python simple and flexible CLI tool used to network testing.

>= 4.1.7, <= 4.2.1NVD

Hellboycc/netbox

GitHubA simple and flexible CLI tool for network

>= 4.1.7, <= 4.2.1NVD

netbox

NPMa spider do something for internet

>= 4.1.7, <= 4.2.1NVD

NetBox

NuGet GalleryProvides common simple helper functions to accelerate .NET development. Those vary by complexity and nature and include a lot of extension methods to calculate hashes (md5, crypto), string operations, short guids, string encoding, collection extensions, CSV support and many more.

>= 4.1.7, <= 4.2.1NVD

Security Advisories

CVE-2024-56918

Description

More on this CVE