CVE-2017-9313

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2017-9313

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-9313.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2017-9313

Published

2017-07-04T02:29:00.283Z

Modified

2026-07-08T16:54:25.484443Z

Severity

6.1 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Summary

[none]

Details

Multiple Cross-site scripting (XSS) vulnerabilities in Webmin before 1.850 allow remote attackers to inject arbitrary web script or HTML via the sec parameter to viewman.cgi, the referers parameter to changereferers.cgi, or the name parameter to save_user.cgi. NOTE: these issues were not fixed in 1.840.

References

Affected packages

Git / github.com/webmin/webmin

Affected ranges

Type

GIT

Repo

https://github.com/webmin/webmin

Events

Introduced

Last affected

867fda60dc99af153822fcdd9caa5c18d63bcc6a

Fixed

a330e913ee099cb9c586ce1b9267647fc566c1ab

Fixed

c2d4a90639afb2403979aa91ba75cb332ae16d1b

Database specific

{
    "cpe": "cpe:2.3:a:webmin:webmin:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.840"
        }
    ],
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ]
}

Affected versions

1.*

1.700

1.710

1.720

1.730

1.740

1.750

1.760

1.770

1.780

1.790

1.800

1.801

1.810

1.820

1.830

1.831

1.840

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-9313.json"