VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Jul 9, 2024· Updated Jun 17, 2026

CVE-2024-38972

CVE-2024-38972

Description

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter at /dcim/power-ports/add/.

Affected products

3
  • NetBox/NetBox2 versions
    cpe:2.3:a:netbox:netbox:4.0.3:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:netbox:netbox:4.0.3:*:*:*:*:*:*:*
    • (no CPE)range: =4.0.3
  • netbox/netboxdescription

Patches

Vulnerability mechanics

News mentions

0

No linked articles in our index yet.