Medium · 6.5 CVE-2024-56915 EUVD-2024-54704GHSA-3qm7-c6pm-5769

Netbox Community v4.1.7 and fixed in v.4.2.2 is vulnerable to Cross Site Scripting (XSS) via the RSS feed widget.

Published Jun 26, 2025 · Updated Jun 26, 2025 · Assigned by mitre

Description

Netbox Community v4.1.7 and fixed in v.4.2.2 is vulnerable to Cross Site Scripting (XSS) via the RSS feed widget.

Advisories 1

WID-SEC-2025-1384 NetBox: Mehrere Schwachstellen ermöglichen Cross-Site Scripting BSI CERT-Bund (WID) · Jun 24, 2025

References