Skip to content
OpenAdvisories

Package · PyPI

netbox-data-flows

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.7
    GHSA-v7qw-hx66-4w9x

    netbox-data-flows has stored XSS in ObjectAlias names rendered inside DataFlow tables

    ### Summary An authenticated user who can create or edit `ObjectAlias` objects can store arbitrary HTML/JavaScript in an alias name. That payload is later rendered unescaped in `DataFlow` table views, causing a stored XSS when another user views the affected …

    netbox-data-flows PyPI