CVE-2024-40741: XSS
A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the circuit ID parameter at /circuits/circuits/{id}/edit/.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-40741?
CVE-2024-40741 is classified as a medium severity vulnerability due to its potential impact on user data and session hijacking.
How do I fix CVE-2024-40741?
To fix CVE-2024-40741, update to a patched version of NetBox that addresses the cross-site scripting vulnerability.
What types of attacks can result from CVE-2024-40741?
CVE-2024-40741 can enable attackers to execute arbitrary web scripts or HTML, leading to malicious activity such as phishing or data theft.
Which versions of NetBox are affected by CVE-2024-40741?
CVE-2024-40741 specifically affects NetBox version 4.0.3.
Where does CVE-2024-40741 occur within the NetBox application?
CVE-2024-40741 occurs in the /circuits/circuits/{id}/edit/ route, where the circuit ID parameter can be exploited.