CVE-2023-38310

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2023-38310

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-38310.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2023-38310

Published

2023-07-31T00:00:00Z

Modified

2026-07-15T01:48:55.328821488Z

Summary

[none]

Details

An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the configuration settings of the system logs functionality. The vulnerability allows an attacker to store an XSS payload in the configuration settings of specific log files. This results in the execution of that payload whenever the affected log files are accessed.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/38xxx/CVE-2023-38310.json",
    "cna_assigner": "mitre"
}

References

Affected packages

Git / github.com/webmin/webmin

Affected ranges

Type

GIT

Repo

https://github.com/webmin/webmin

Events

Introduced

43159eef0c13dbae3f238dd60a2ab35920f886be

Last affected

43159eef0c13dbae3f238dd60a2ab35920f886be

Database specific

{
    "cpe": "cpe:2.3:a:webmin:webmin:2.021:*:*:*:*:*:*:*",
    "source": "CPE_STRING",
    "extracted_events": [
        {
            "introduced": "2.021"
        },
        {
            "last_affected": "2.021"
        }
    ]
}

Affected versions

2.*

2.021

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-38310.json"