CVE-2023-37624

Severity: medium (CVSS 6.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2023-07-26 · updated 2026-06-17
Weakness: CWE-601

Description

Netdisco before v2.063000 was discovered to contain an open redirect vulnerability. An attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on crafted links.

Affected products

Netdisco: before 2.063000 — fixed in 2.063000

How to fix

Upgrade to a fixed version: Netdisco 2.063000. Check the vendor advisory for mitigations.

References

https://github.com/benjaminpsinclair/Netdisco-2023-Advisory
https://github.com/benjaminpsinclair/Netdisco-CVE
https://github.com/netdisco/netdisco/commit/a2da6a7a046c1c0fd41072dd6991eec7614293f8
https://github.com/benjaminpsinclair/Netdisco-2023-Advisory
https://github.com/benjaminpsinclair/Netdisco-CVE
https://github.com/netdisco/netdisco/commit/a2da6a7a046c1c0fd41072dd6991eec7614293f8

Get alerted when CVE-2023-37624 or the next vulnerability affects your stack