CVE-2019-25011: NetBox through 2.6.2 allows an Authenticated User to conduct an XSS attack against an admin via a GFM-rende...

Security readout for executives and security teams

CVE-2019-25011 is an authenticated cross-site scripting issue in NetBox through 2.6.2. A logged-in user could place unsafe content in a Markdown-rendered field so an administrator's browser executes it when viewed. The business risk is administrator browser compromise, but the provided sources do not show active exploitation. Exposure is most likely in NetBox deployments running version 2.6.2 or earlier where non-admin authenticated users can create or edit GFM-rendered fields such as site comments. Internet exposure increases consequence, but authentication is still required by the CVE description. Treat this as a targeted administrative-risk issue rather than a broad unauthenticated perimeter flaw. Remediate promptly if NetBox has untrusted authenticated users or external access, because administrator interaction could raise the impact of a seemingly low-entry vulnerability. Mitigation focus: Inventory NetBox deployments and identify versions at or below 2.6.2.; Check NetBox project guidance for the fixed release and recommended upgrade path.; Restrict affected GFM field editing to trusted users until remediated..

Prepared

Jun 3, 2026, 03:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.