CVE-2024-56915: XSS
Published Jun 26, 2025
·Updated
Netbox Community v4.1.7 and fixed in v.4.2.2 is vulnerable to Cross Site Scripting (XSS) via the RSS feed widget.
Affected Software
2 affected components
netbox NetBox Community=4.1.7
netbox Netbox>=4.1.7<4.2.2
Event History
Jun 26, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-56915?
CVE-2024-56915 is classified as a high severity vulnerability due to its exploitation potential via Cross Site Scripting (XSS).
2
How do I fix CVE-2024-56915?
To fix CVE-2024-56915, you should upgrade Netbox Community to version 4.2.2 or later, which addresses the vulnerability.
3
What type of vulnerability is CVE-2024-56915?
CVE-2024-56915 is a Cross Site Scripting (XSS) vulnerability found in the RSS feed widget of Netbox Community.
4
Which versions of Netbox are affected by CVE-2024-56915?
CVE-2024-56915 affects Netbox Community version 4.1.7.
5
Can CVE-2024-56915 be exploited remotely?
Yes, CVE-2024-56915 can be exploited remotely if an attacker can inject malicious scripts into the RSS feed widget.