Vulnerabilities

TI-2023-19194 CVE-2023-37624 · GHSA-gw8w-qw5v-vj6c

Netdisco before v2.063000 was discovered to contain an open redirect vulnerability.

MEDIUM 60

Netdisco before v2.063000 was discovered to contain an open redirect vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0065 Published 2023-07-26 No fix listed CWE-601

TI-2023-19193 CVE-2023-37623 · GHSA-w978-xwmq-r68w

MEDIUM 55

Netdisco before v2.063000 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /Web/TypeAhead.pm.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00625 Published 2023-07-26 No fix listed CWE-79

TI-2019-11878 CVE-2019-15810 · GHSA-6r28-6vrf-96vj

LOW 29

Insufficient sanitization during device search in Netdisco 2.042010 allows for reflected XSS via manipulation of a URL parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00878 Published 2019-09-30 No fix listed CWE-79