Advisories · Technology
netbox.
Every CVE that names netbox among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
NetBox from 2.9.0 before 4.7.4 Authorization Bypass via BulkComponentCreateView
- netbox
- Broken access control
- CVSS 6.9 Medium
NetBox 2.9.5 < 4.7.0 Session Hijacking via Custom Links
- netbox
- Cross-site scripting (XSS)
- Information disclosure
- CVSS 5.3 Medium
NetBox through 4.7.0 Information Disclosure via REST and GraphQL APIs
- netbox
- Broken access control
- CVSS 7.1 High
NetBox through 4.7.0 Credential Disclosure via REST and GraphQL APIs
- netbox
- Hard-coded credentials
- CVSS 7.1 High
NetBox 4.5.8 ORM Injection via WritableNestedSerializer
- NetBox
- Broken access control
- CVSS 8.7 High
NetBox 4.3.5 - 4.5.4 RCE via RenderTemplateMixin
- netbox
- CWE-183
- CVSS 2.4 Low
NetBox Home Page Configuration config-revisions cross site scripting
- NetBox
- Cross-site scripting (XSS)