Low WID-SEC-2023-1925 14 CVEs

Webmin: Mehrere Schwachstellen ermöglichen Cross-Site Scripting

Published Jul 31, 2023 · Updated Sep 14, 2023 · Revision 3 · de-DE

Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Webmin ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

Webmin ist eine modulare Webanwendung zur Administration eines Unix-basierenden Systems und zur Konfiguration einzelner Dienste.

Vulnerabilities 14

Unscored —

CVE-2023-38303

An issue was discovered in Webmin 2.021. One can exploit a stored Cross-Site Scripting (XSS) attack to achieve Remote C…

Jul 31, 2023
Unscored —

CVE-2023-38304

An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the Users …

Jul 31, 2023
Unscored —

CVE-2023-38305

An issue was discovered in Webmin 2.021. The download functionality allows an attacker to exploit a Cross-Site Scriptin…

Jul 31, 2023
Unscored —

CVE-2023-38306

An issue was discovered in Webmin 2.021. A Cross-site Scripting (XSS) Bypass vulnerability was discovered in the file u…

Jul 31, 2023
Unscored —

CVE-2023-38307

An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the Users …

Jul 31, 2023
Unscored —

CVE-2023-38308

An issue was discovered in Webmin 2.021. A Cross-Site Scripting (XSS) vulnerability was discovered in the HTTP Tunnel f…

Jul 31, 2023
Unscored —

CVE-2023-38309

An issue was discovered in Webmin 2.021. A Reflected Cross-Site Scripting (XSS) vulnerability was discovered in the pac…

Jul 31, 2023
Unscored —

CVE-2023-38310

An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the config…

Jul 31, 2023
Unscored —

CVE-2023-38311

An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the System…

Jul 31, 2023
Unscored —

CVE-2023-40982

A stored cross-site scripting (XSS) vulnerability in Webmin v2.100 allows attackers to execute arbitrary web scripts or…

Sep 15, 2023
Unscored —

CVE-2023-40983

A reflected cross-site scripting (XSS) vulnerability in the File Manager function of Webmin v2.100 allows attackers to …

Sep 15, 2023
Unscored —

CVE-2023-40984

A reflected cross-site scripting (XSS) vulnerability in the File Manager function of Webmin v2.100 allows attackers to …

Sep 15, 2023
Unscored —

CVE-2023-40985

An issue was discovered in Webmin 2.100. The File Manager functionality allows an attacker to exploit a Cross-Site Scri…

Sep 15, 2023
Unscored —

CVE-2023-40986

A stored cross-site scripting (XSS) vulnerability in the Usermin Configuration function of Webmin v2.100 allows attacke…

Sep 15, 2023

Revision history

2023-09-14 #3
CVE ergänzt
2023-08-03 #2
CVE's ergänzt
2023-07-31 #1
Initiale Fassung

References

NIST Database vom 2023-07-31
https://nvd.nist.gov/vuln/detail/CVE-2023-38311
NIST Database vom 2023-07-31
https://nvd.nist.gov/vuln/detail/CVE-2023-38310
NIST Database vom 2023-07-31
https://nvd.nist.gov/vuln/detail/CVE-2023-38309
NIST Database vom 2023-07-31
https://nvd.nist.gov/vuln/detail/CVE-2023-38308
NIST Database vom 2023-07-31
https://nvd.nist.gov/vuln/detail/CVE-2023-38307
NIST Database vom 2023-07-31
https://nvd.nist.gov/vuln/detail/CVE-2023-38306
NIST Database vom 2023-07-31
https://nvd.nist.gov/vuln/detail/CVE-2023-38305
NIST Database vom 2023-07-31
https://nvd.nist.gov/vuln/detail/CVE-2023-38304
NIST Database vom 2023-07-31
https://nvd.nist.gov/vuln/detail/CVE-2023-38303