NetBox: Mehrere Schwachstellen ermöglichen Cross-Site Scripting

Summary

Product

Vulnerabilities 4

• High 7.1
  CVE-2024-56917

  Netbox Community 4.1.7 is vulnerable to Cross Site Scripting (XSS) via the maintenance banner` in maintenance mode.

  Jun 24, 2025
• Medium 6.5
  CVE-2024-56915

  Netbox Community v4.1.7 and fixed in v.4.2.2 is vulnerable to Cross Site Scripting (XSS) via the RSS feed widget.

  Jun 26, 2025
• Medium 6.1
  CVE-2024-56916

  In Netbox Community 4.1.7, once authenticated, Configuration History > Add`is vulnerable to cross-site scripting (XSS) …

  Jun 24, 2025
• Medium 6.1
  CVE-2024-56918

  In Netbox Community 4.1.7, the login page is vulnerable to cross-site scripting (XSS), which allows a privileged, authe…

  Jun 24, 2025

Revision history

1. 2025-06-24 #1

   Initiale Fassung

References

• NIST Vulnerability Database vom 2025-06-24
  https://nvd.nist.gov/vuln/detail/CVE-2024-56916
• NIST Vulnerability Database vom 2025-06-24
  https://nvd.nist.gov/vuln/detail/CVE-2024-56917
• NIST Vulnerability Database vom 2025-06-24
  https://nvd.nist.gov/vuln/detail/CVE-2024-56918
• noxlumens Vulnerability-Research vom 2025-06-24
  https://github.com/noxlumens/Vulnerability-Research/tree/main/CVE-2024-56916
• noxlumens Vulnerability-Research vom 2025-06-24
  https://github.com/noxlumens/Vulnerability-Research/tree/main/CVE-2024-56917
• noxlumens Vulnerability-Research vom 2025-06-24
  https://github.com/noxlumens/Vulnerability-Research/tree/main/CVE-2024-56918
• NIST Vulnerability Database vom 2025-06-24
  https://nvd.nist.gov/vuln/detail/CVE-2024-56915
• NIST Vulnerability Database vom 2025-06-24
  https://nvd.nist.gov/vuln/detail/CVE-2024-56920
• noxlumens Vulnerability-Research vom 2025-06-24
  https://github.com/noxlumens/Vulnerability-Research/tree/main/CVE-2024-56915
• noxlumens Vulnerability-Research vom 2025-06-24
  https://github.com/noxlumens/Vulnerability-Research/tree/main/CVE-2024-56920