Unscored CVE-2023-41153 EUVD-2023-45672GHSA-mx8j-4265-g43j

A Stored Cross-Site Scripting (XSS) vulnerability in the SSH configuration tab in Usermin 2.001 allows remote attackers to inject arbitrary…

Published Aug 29, 2023 · Updated Oct 2, 2024 · Assigned by mitre

Description

A Stored Cross-Site Scripting (XSS) vulnerability in the SSH configuration tab in Usermin 2.001 allows remote attackers to inject arbitrary web script or HTML via options for the host value while editing the host options.

Advisories 1

WID-SEC-2023-2209 Webmin: Schwachstelle ermöglicht Cross-Site Scripting BSI CERT-Bund (WID) · Sep 21, 2023

References

https://webmin.com/tags/webmin-changelog/
https://github.com/shindeanik/Usermin-2.001/blob/main/CVE-2023-41153