What is GHSA-v4xv-795h-rv4h?

GHSA-v4xv-795h-rv4h is a security advisory published by GitHub Security Advisories with High severity. XSS potential in rendered Markdown fields (comments, description, notes, etc.)

Which CVE IDs does GHSA-v4xv-795h-rv4h cover?

GHSA-v4xv-795h-rv4h covers the following CVE IDs: CVE-2024-23345. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-v4xv-795h-rv4h?

GHSA-v4xv-795h-rv4h has a CVSS v3 base score of 7.1, published by GitHub Security Advisories.

Which products are affected by GHSA-v4xv-795h-rv4h?

GHSA-v4xv-795h-rv4h affects 2 products, including: pip/nautobot:\u003e= 2.0.0, \u003c 2.1.2; pip/nautobot:\u003c 1.6.10.

GHSA-v4xv-795h-rv4hHighCVSS 7.1

XSS potential in rendered Markdown fields (comments, description, notes, etc.)

Vendor

GitHub Security Advisories

Published

January 23, 2024

Last Modified

February 7, 2024

🔗 CVE IDs covered (1)

CVE-2024-23345 →

📋 Description

Impact

All users of Nautobot versions earlier than 1.6.10 or 2.1.2 are potentially impacted.

Due to inadequate input sanitization, any user-editable fields that support Markdown rendering, including:

Circuit.comments
Cluster.comments
CustomField.description
Device.comments
DeviceRedundancyGroup.comments
DeviceType.comments
Job.description
JobLogEntry.message
Location.comments
Note.note
PowerFeed.comments
Provider.noc_contact
Provider.admin_contact
Provider.comments
ProviderNetwork.comments
Rack.comments
Tenant.comments
VirtualMachine.comments
Contents of any custom fields of type markdown
Job class description attributes
The SUPPORT_MESSAGE system configuration setting

are potentially susceptible to cross-site scripting (XSS) attacks via maliciously crafted data.

Patches

Fixed in Nautobot versions 1.6.10 and 2.1.2.

References

https://github.com/nautobot/nautobot/pull/5133 https://github.com/nautobot/nautobot/pull/5134

🎯 Affected products2

pip/nautobot:>= 2.0.0, < 2.1.2
pip/nautobot:< 1.6.10