NetBox Community Cross-Site Scripting Vulnerability in Maintenance Banner

A cross-site scripting (XSS) vulnerability has been identified in NetBox Community version 4.1.7. The issue arises when the application is in maintenance mode, allowing for the injection of malicious scripts via the maintenance banner.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Reproduction

To reproduce this vulnerability, activate maintenance mode in NetBox Community 4.1.7. Once maintenance mode is active, inject a script into the maintenance banner. The injected script will be executed, demonstrating the cross-site scripting vulnerability.