PT-2023-26046 · Netdisco · Netdisco

Ollyg · Published 2023-07-26 · Updated 2023-08-02 · CVE-2023-37624

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Netdisco versions prior to 2.063000

Description The issue allows an attacker to redirect users to arbitrary web URLs by tricking victim users into clicking on crafted links.

Recommendations For versions prior to 2.063000, update to version 2.063000 or later to resolve the issue.

Exploit

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2023-37624

Affected Products

Netdisco

References · 5

• 🔥 https://github.com/benjaminpsinclair/Netdisco-2023-Advisory · Exploit
• 🔥 https://github.com/benjaminpsinclair/Netdisco-CVE · Exploit
• https://github.com/netdisco/netdisco/commit/a2da6a7a046c1c0fd41072dd6991eec7614293f8 · Patch
• https://osv.dev/vulnerability/CVE-2023-37624 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-37624 · Security Note