CVE-2024-40733

Summary

CVE-2024-40733 is a newly identified cross-site scripting (XSS) vulnerability affecting netbox v4.0.3. Malicious actors can exploit this flaw by injecting malicious scripts into the Name parameter of the /dcim/front-ports/{id}/edit/ endpoint. If successfully exploited, the vulnerability allows attackers to execute arbitrary web scripts or HTML code on unsuspecting users' browsers, potentially leading to data theft, session hijacking, or other malicious activities. Netbox users are strongly urged to upgrade to the latest version of the software to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.