Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

Privacy Policy
Terms of Service
Contact

CVE-2025-57543 — MEDIUM severity vulnerability | Release Alert

CVE-2025-57543

6.1

MEDIUMCVSS v3

Published

March 16, 2026

Affected

7 projects

Assigned by

MITRE

Severity scale

010

Description

Cross Site scripting vulnerability (XSS) in NetBox 4.3.5 "comment" field on object forms. An attacker can inject arbitrary HTML, which will be rendered in the web UI when viewed by other users. This could potentially lead to user interface redress attacks or be escalated to XSS in certain contexts.

netbox-community/netbox

GitHubThe premier source of truth powering network automation. Open source under Apache 2. Try NetBox Cloud free: https://netboxlabs.com/products/free-netbox-cloud/

= 4.3.5NVD

netboxcommunity/netbox

Docker HubHere are the community-maintained Docker images of Netbox.

= 4.3.5NVD

netbox

More on this CVE

NVD↗GitHub Advisory↗

Python Package IndexA python simple and flexible CLI tool used to network testing.

= 4.3.5NVD

Hellboycc/netbox

GitHubA simple and flexible CLI tool for network

= 4.3.5NVD

netbox

NPMa spider do something for internet

= 4.3.5NVD

NetBox

NuGet GalleryProvides common simple helper functions to accelerate .NET development. Those vary by complexity and nature and include a lot of extension methods to calculate hashes (md5, crypto), string operations, short guids, string encoding, collection extensions, CSV support and many more.

= 4.3.5NVD

netbox

Crates.ioergonomic rust client for NetBox 4.x REST API

= 4.3.5NVD