CVE-2024-40737

Summary

CVE-2024-40737 is a newly discovered cross-site scripting (XSS) vulnerability affecting netbox v4.0.3. This issue allows attackers to inject malicious web scripts or HTML code into the Name parameter of the /dcim/console-ports/add endpoint. Successful exploitation could lead to unintended execution of attacker-supplied code in a user's browser, potentially resulting in session hijacking or data theft. Netbox users are advised to upgrade to a patched version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.