Filtered by vendor Lenel Subscriptions
Filtered by product Netbox Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-47226 1 Lenel 1 Netbox 2024-09-26 5.4 Medium
A stored cross-site scripting (XSS) vulnerability exists in NetBox 4.1.0 within the "Configuration History" feature of the "Admin" panel via a /core/config-revisions/ Add action. An authenticated user can inject arbitrary JavaScript or HTML into the "Top banner" field.