CVE-2023-41155
See a problem?- Source
- https://nvd.nist.gov/vuln/detail/CVE-2023-41155
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-41155.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2023-41155
- Published
- 2023-09-13T22:15:08Z
- Modified
- 2024-09-03T04:33:49.612205Z
- Severity
-
- 5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
- Summary
- [none]
- Details
-
A Stored Cross-Site Scripting (XSS) vulnerability in the mail forwarding and replies tab in Webmin and Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the forward to field while creating a mail forwarding rule.
- References
Affected packages
Git / github.com/webmin/usermin
Affected ranges
- Type
- GIT
- Repo
- https://github.com/webmin/usermin
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast affected
- Type
- GIT
- Repo
- https://github.com/webmin/webmin
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast affected
Affected versions
1.*
1.700
1.710
1.720
1.730
1.740
1.750
1.760
1.770
1.780
1.790
1.800
1.801
1.803
1.810
1.812
1.820
1.823
1.830
1.831
1.832
1.833
1.834
1.840
1.841
1.850
1.851
1.852
1.853
1.854
1.860
1.861
1.870
1.880
1.890
1.900
1.910
1.920
1.930
1.940
1.941
1.950
1.951
1.953
1.954
1.955
1.960
1.962
1.970
1.972
1.973
1.974
1.979
1.980
1.982
1.983
1.984
1.990
1.991
1.993
1.994
1.995
1.996
1.997
1.998
1.999
2.*
2.000