Tu LeforHSCT Blogblog.hsct.vn·Jul 24, 2023Stored Cross Site Scripting Vulnerability in "Maintenance banner" function in Netbox 3.5.6Version: 3.5.6 Description An authenticated malicious user can take advantage of a Stored XSS vulnerability in "Maintenance banner" function in the "[Home]› [Extras] › [Config revisions] › Add config revision" feature. Proof of Concept Step 1: Go to ...netboxAdd a thoughtful comment1 commentTop commentstoffu·Jul 24, 2023Jul 24, 2023Sound great! Keep moving forward Tu Le ·Reply