Reflected Cross-Site Scripting Vulnerability in Webmin by Virtualmin
CVE-2023-40984

5.4MEDIUM

Key Information:

Vendor

Webmin

Status
Webmin
Vendor
CVE Published:
15 September 2023

What is CVE-2023-40984?

A reflected cross-site scripting (XSS) vulnerability exists in the File Manager function of Webmin v2.100. This security flaw allows attackers to execute malicious scripts by injecting crafted payloads through the Replace in Results file mechanism. Successful exploitation could lead to unauthorized actions on behalf of users, making it essential for administrators to apply security best practices and update their systems promptly.

References

http://webmin.com
https://github.com/Vi39/Webmin-2.100/blob/main/CVE-2023-4...

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.