CVE-2023-37623 Information

Description

Netdisco before v2.063000 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /Web/TypeAhead.pm.

Reference

https://github.com/benjaminpsinclair/Netdisco-CVE https://github.com/netdisco/netdisco/commit/9f4401f2fb00c84210cd551b97c8ad60e78c71e0 https://github.com/benjaminpsinclair/Netdisco-2023-Advisory https://github.com/netdisco/netdisco/commit/39562e0633a2472d50f7f33e69c36da4ad1fbfa3

Share on: