CVE-2023-37624

Katalog CVE

CVSS 6.1 · Medium EPSS 0,65%

Kerentanan URL Redirection to Untrusted Site ('Open Redirect') pada netdisco. Skor CVSS 3.1 6.1 (Medium) menurut NVD.

Deskripsi (NVD)

Netdisco before v2.063000 was discovered to contain an open redirect vulnerability. An attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on crafted links.

Rincian

Terbit di NVD

26 Juli 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.1 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

EPSS (30 hari)

0,65% peluang dieksploitasi; lebih tinggi dari 49,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/netdisco/netdisco/commit/a2da6a7a046c1c0fd41072dd6991eec7614293f8 patch
• https://github.com/benjaminpsinclair/Netdisco-2023-Advisory exploit
• https://github.com/benjaminpsinclair/Netdisco-CVE exploit