CVE-2024-56917

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-56917
Netbox Community 4.1.7 is vulnerable to Cross Site Scripting (XSS) via the maintenance banner` in maintenance mode.

7.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 4.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://github.com/netbox-community/netbox/releases/tag/v4.1.7 Release Notes
https://github.com/noxlumens/Vulnerability-Research/tree/main/CVE-2024-56917 Exploit Third Party Advisory
https://youtu.be/GC8-PUlu2i8?si=eoScOk8IUJdwPDc_&t=172 Exploit
Configurations

Configuration 1 (hide)

cpe:2.3:a:netbox:netbox:*:*:*:*:*:*:*:*
History

30 Jun 2025, 14:44

Type Values Removed Values Added
References () https://github.com/netbox-community/netbox/releases/tag/v4.1.7 - () https://github.com/netbox-community/netbox/releases/tag/v4.1.7 - Release Notes
References () https://github.com/noxlumens/Vulnerability-Research/tree/main/CVE-2024-56917 - () https://github.com/noxlumens/Vulnerability-Research/tree/main/CVE-2024-56917 - Exploit, Third Party Advisory
References () https://youtu.be/GC8-PUlu2i8?si=eoScOk8IUJdwPDc_&t=172 - () https://youtu.be/GC8-PUlu2i8?si=eoScOk8IUJdwPDc_&t=172 - Exploit
First Time Netbox
Netbox netbox
CPE cpe:2.3:a:netbox:netbox:*:*:*:*:*:*:*:*

26 Jun 2025, 18:58

Type Values Removed Values Added
Summary
  • (es) Netbox Community 4.1.7 es vulnerable a Cross Site Scripting (XSS) a través del banner de mantenimiento en modo de mantenimiento.

24 Jun 2025, 20:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-24 20:15

Updated : 2025-06-30 14:44

NVD link : CVE-2024-56917

Mitre link : CVE-2024-56917

CVE.ORG link : CVE-2024-56917

JSON object : View

Products Affected

netbox

  • netbox
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')