Unscored CVE-2023-38303 EUVD-2023-42122GHSA-f4fw-wg3g-qwc8

An issue was discovered in Webmin 2.021. One can exploit a stored Cross-Site Scripting (XSS) attack to achieve Remote Command Execution (RC…

Published Jul 31, 2023 · Updated Oct 22, 2024 · Assigned by mitre

Description

An issue was discovered in Webmin 2.021. One can exploit a stored Cross-Site Scripting (XSS) attack to achieve Remote Command Execution (RCE) through the Users and Group's real name parameter.

Advisories 1

WID-SEC-2023-1925 Webmin: Mehrere Schwachstellen ermöglichen Cross-Site Scripting BSI CERT-Bund (WID) · Sep 14, 2023

References

https://webmin.com/tags/webmin-changelog/
https://github.com/jaysharma786/Webmin-2.021/blob/main/CVE-2023-38303