PT-2023-26046 · Netdisco · Netdisco

Ollyg · Publicado 2023-07-26 · Atualizado 2023-08-02 · CVE-2023-37624

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Netdisco versions prior to 2.063000

Description The issue allows an attacker to redirect users to arbitrary web URLs by tricking victim users into clicking on crafted links.

Recommendations For versions prior to 2.063000, update to version 2.063000 or later to resolve the issue.

Exploit

Correção

Open Redirect

Enumeração de Fraquezas

CWE-601

Identificadores relacionados

CVE-2023-37624

Produtos afetados

Netdisco

Referências · 5

• 🔥 https://github.com/benjaminpsinclair/Netdisco-2023-Advisory · Exploit
• 🔥 https://github.com/benjaminpsinclair/Netdisco-CVE · Exploit
• https://github.com/netdisco/netdisco/commit/a2da6a7a046c1c0fd41072dd6991eec7614293f8 · Correção
• https://osv.dev/vulnerability/CVE-2023-37624 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-37624 · Nota de Segurança