Medium WID-SEC-2023-2232 10 CVEs

Usermin: Mehrere Schwachstellen ermöglichen Cross-Site Scripting

Published Aug 30, 2023 · Updated Sep 17, 2023 · Revision 5 · de-DE

Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Usermin ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

Usermin ist eine modulare Webanwendung zur Administration eines Unix-basierenden Systems und zur Konfiguration einzelner Dienste.

Vulnerabilities 10

Unscored —

CVE-2023-41152

A Stored Cross-Site Scripting (XSS) vulnerability in the MIME type programs tab in Usermin 2.000 allows remote attacker…

Sep 13, 2023
Unscored —

CVE-2023-41154

A Stored Cross-Site Scripting (XSS) vulnerability in the scheduled cron jobs tab in Usermin 2.000 allows remote attacke…

Sep 13, 2023
Unscored —

CVE-2023-41155

A Stored Cross-Site Scripting (XSS) vulnerability in the mail forwarding and replies tab in Webmin and Usermin 2.000 al…

Sep 13, 2023
Unscored —

CVE-2023-41156

A Stored Cross-Site Scripting (XSS) vulnerability in the filter and forward mail tab in Usermin 2.001 allows remote att…

Sep 14, 2023
Unscored —

CVE-2023-41157

Multiple stored cross-site scripting (XSS) vulnerabilities in Usermin 2.000 allow remote attackers to inject arbitrary …

Sep 16, 2023
Unscored —

CVE-2023-41158

A Stored Cross-Site Scripting (XSS) vulnerability in the MIME type programs tab in Usermin 2.000 allows remote attacker…

Sep 13, 2023
Unscored —

CVE-2023-41160

A Stored Cross-Site Scripting (XSS) vulnerability in the SSH configuration tab in Usermin 2.001 allows remote attackers…

Sep 14, 2023
Unscored —

CVE-2023-41161

Multiple stored cross-site scripting (XSS) vulnerabilities in Usermin 2.000 allow remote attackers to inject arbitrary …

Sep 7, 2023
Unscored —

CVE-2023-41162

A Reflected Cross-site scripting (XSS) vulnerability in the file manager tab in Usermin 2.000 allows remote attackers t…

Sep 13, 2023
Unscored —

CVE-2023-41163

A Reflected Cross-site scripting (XSS) vulnerability in the file manager tab in Usermin 2.000 allows remote attackers t…

Aug 30, 2023

Revision history

2023-09-17 #5
CVE ergänzt
2023-09-14 #4
CVE ergänzt
2023-09-13 #3
CVE's ergänzt
2023-09-07 #2
CVE-2023-41161 ergänzt, Beschreibung angepasst
2023-08-30 #1
Initiale Fassung

References

Nattional Vulnerability Database CVE-2023-41161 vom 2023-09-07
https://nvd.nist.gov/vuln/detail/CVE-2023-41161
GitHub Security Advisory - Webmin - GHSA-fgpx-5352-x7c3 vom 2023-08-30
https://github.com/advisories/GHSA-fgpx-5352-x7c3