medium4.8
CVE-2023-37623
Netdisco before v2.063000 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /Web/TypeAhead.pm.
Impact
Netdisco before v2.063000 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /Web/TypeAhead.pm.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netdisco | Netdisco | before 2.063000 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/benjaminpsinclair/Netdisco-2023-Advisory
- https://github.com/benjaminpsinclair/Netdisco-CVE
- https://github.com/netdisco/netdisco/commit/39562e0633a2472d50f7f33e69c36da4ad1fbfa3
- https://github.com/netdisco/netdisco/commit/9f4401f2fb00c84210cd551b97c8ad60e78c71e0
- https://github.com/benjaminpsinclair/Netdisco-2023-Advisory
- https://github.com/benjaminpsinclair/Netdisco-CVE
- https://github.com/netdisco/netdisco/commit/39562e0633a2472d50f7f33e69c36da4ad1fbfa3
- https://github.com/netdisco/netdisco/commit/9f4401f2fb00c84210cd551b97c8ad60e78c71e0