CyberRota Analysis
AI-GeneratedA reflected XSS vulnerability in Netron versions up to 9.1.2 allows attackers to exploit unsanitized node names, potentially leading to remote code execution through Chrome. This issue can enable malicious actors to hide nodes and perform port scanning, posing a risk to users of the affected desktop application. Organizations using Netron should prioritize patching this vulnerability to safeguard against potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Reflected XSS in Netron versions <=9.1.2 on desktop application through unsanitized node names allows an attacker to hide certain nodes, perform port scanning or abuse a Chrome n-day to achieve Remote Code Execution.