Unscored CVE-2023-38304 EUVD-2023-42123GHSA-m6w5-xrw6-ph6m

An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the Users and Groups functiona…

Published Jul 31, 2023 · Updated Oct 18, 2024 · Assigned by mitre

Description

An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the Users and Groups functionality, allowing an attacker to store a malicious payload in the Group Name field when creating a new group.

Advisories 1

WID-SEC-2023-1925 Webmin: Mehrere Schwachstellen ermöglichen Cross-Site Scripting BSI CERT-Bund (WID) · Sep 14, 2023

References

https://webmin.com/tags/webmin-changelog/
https://github.com/jaysharma786/Webmin-2.021/blob/main/CVE-2023-38304