CVE-2023-41163

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-41163
A Reflected Cross-site scripting (XSS) vulnerability in the file manager tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the replace in results field while replacing the results under the tools drop down.

6.1 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://github.com/shindeanik/Usermin-2.000/blob/main/CVE-2023-41163 Third Party Advisory
https://webmin.com/tags/webmin-changelog/ Release Notes
Configurations

Configuration 1 (hide)

cpe:2.3:a:webmin:webmin:2.000:*:*:*:*:*:*:*
History

05 Sep 2023, 19:37

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.1
First Time Webmin
Webmin webmin
References (MISC) https://github.com/shindeanik/Usermin-2.000/blob/main/CVE-2023-41163 - (MISC) https://github.com/shindeanik/Usermin-2.000/blob/main/CVE-2023-41163 - Third Party Advisory
References (MISC) https://webmin.com/tags/webmin-changelog/ - (MISC) https://webmin.com/tags/webmin-changelog/ - Release Notes
CPE cpe:2.3:a:webmin:webmin:2.000:*:*:*:*:*:*:*
CWE CWE-79

31 Aug 2023, 23:15

Type Values Removed Values Added
References
  • (MISC) https://github.com/shindeanik/Usermin-2.000/blob/main/CVE-2023-41163 -

30 Aug 2023, 22:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-08-30 22:15

Updated : 2023-12-10 15:14

NVD link : CVE-2023-41163

Mitre link : CVE-2023-41163

CVE.ORG link : CVE-2023-41163

JSON object : View

Products Affected

webmin

  • webmin
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')