IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2026-03-16 16:16

MODIFIED

2026-03-16 16:16

EPSS (Prob. Exploit)

0.19%

Top 91.8%

DATA SOURCES:

NVD 🔗 2026-03-16 FIRST EPSS 🔗 2026-11-08 OSV 🔗 2026-11-08

> DESCRIPTION

Cross Site scripting vulnerability (XSS) in NetBox 4.3.5 "comment" field on object forms. An attacker can inject arbitrary HTML, which will be rendered in the web UI when viewed by other users. This could potentially lead to user interface redress attacks or be escalated to XSS in certain contexts.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

AFFECTED PACKAGES:

Unknown / Unknown

2 versions affected

> HISTORIQUE DES MODIFICATIONS

Première apparition

16/03/2026 16:16

Source: NVD

Total des modifications: 0 Dernière mise à jour: 7 months ago

> REFERENCES