A Reflected Cross-site scripting (XSS) vulnerability in the file manager tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the replace in results field while replacing the results under the tools drop down.
References
| Link | Resource |
|---|---|
| https://github.com/shindeanik/Usermin-2.000/blob/main/CVE-2023-41163 | Third Party Advisory |
| https://webmin.com/tags/webmin-changelog/ | Release Notes |
Configurations
History
05 Sep 2023, 19:37
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
| CPE | cpe:2.3:a:webmin:webmin:2.000:*:*:*:*:*:*:* | |
| References | (MISC) https://github.com/shindeanik/Usermin-2.000/blob/main/CVE-2023-41163 - Third Party Advisory | |
| References | (MISC) https://webmin.com/tags/webmin-changelog/ - Release Notes | |
| First Time |
Webmin webmin
Webmin |
|
| CWE | CWE-79 |
31 Aug 2023, 23:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
30 Aug 2023, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-08-30 22:15
Updated : 2024-02-28 20:33
NVD link : CVE-2023-41163
Mitre link : CVE-2023-41163
CVE.ORG link : CVE-2023-41163
JSON object : View
Products Affected
webmin
- webmin
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')