Skip to content
OpenAdvisories
Unscored CVE-2014-3886 EUVD-2014-3823GHSA-hff3-r5mq-ph8h

Cross-site scripting (XSS) vulnerability in Webmin before 1.690, when referrer checking is disabled, allows remote attackers to inject arbi…

Published Jul 20, 2014 · Updated Aug 6, 2024 · Assigned by jpcert

Description

Cross-site scripting (XSS) vulnerability in Webmin before 1.690, when referrer checking is disabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2014-3924.

References