medium5.4
CVE-2023-36234
Cross Site Scripting (XSS) vulnerability in Netbox 3.5.1, allows attackers to execute arbitrary code via Name field in device-roles/add function.
Impact
Cross Site Scripting (XSS) vulnerability in Netbox 3.5.1, allows attackers to execute arbitrary code via Name field in device-roles/add function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netbox | Netbox | Version 3.5.1 |