CVE-2023-37623

MediumCVSS 4.8

Published: 26/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.52%

40th percentile - higher than 40% of all known CVEs

Netdisco before v2.063000 was found to contain a cross-site scripting (XSS) vulnerability via the component /Web/TypeAhead.pm.

Exploitation of this vulnerability could lead to user data theft or session hijacking, posing a serious security threat to the application.

It is recommended to upgrade Netdisco to version v2.063000 or later to mitigate this vulnerability.

Original NVD description (English source)

Netdisco before v2.063000 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /Web/TypeAhead.pm.