Medium severity6.1NVD Advisory· Published Jul 9, 2024· Updated Jun 17, 2026
CVE-2024-40742
CVE-2024-40742
Description
A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the circuit ID parameter at /circuits/circuits/add.
Affected products
2- netbox/netboxdescription
Patches
Vulnerability mechanics
News mentions
0No linked articles in our index yet.