CyberRota Analysis
AI-GeneratedA reflected XSS vulnerability in the Netron desktop application (versions <=9.1.2) allows attackers to exploit unsanitized node names, potentially leading to remote code execution through a Chrome n-day. This issue primarily affects users of the Netron application who utilize Chrome, as it can enable attackers to manipulate node visibility and conduct port scanning. Organizations using this software should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Reflected XSS in Netron versions <=9.1.2 on desktop application through unsanitized node names allows an attacker to hide certain nodes, perform port scanning or abuse a Chrome n-day to achieve Remote Code Execution.