Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross Site scripting vulnerability (XSS) in NetBox 4.3.5 "comment" field on object forms. An attacker can inject arbitrary HTML, which will be rendered in the web UI when viewed by other users. This could potentially lead to user interface redress attacks or be escalated to XSS in certain contexts.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
NetBox 安全漏洞
Vulnerability Description
NetBox是NetBox社区的一款基于Django、PostgreSql 用于IP地址管理（IPAM）和数据中心基础结构管理（DCIM）的工具。 NetBox 4.3.5版本存在安全漏洞，该漏洞源于对象表单的comment字段存在跨站脚本，可能导致攻击者注入任意HTML，在其他用户查看时渲染，引发用户界面篡改攻击或在特定环境下升级为跨站脚本攻击。
CVSS Information
N/A
Vulnerability Type
N/A