CVE-2023-41159

See a problem?
Source
https://nvd.nist.gov/vuln/detail/CVE-2023-41159
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-41159.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-41159
Published
2023-09-14T21:15:10Z
Modified
2024-09-03T04:33:27.881389Z
Severity
  • 5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

A Stored Cross-Site Scripting (XSS) vulnerability while editing the autoreply file page in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML by editing the forward file manually.

References

Affected packages

Git / github.com/webmin/usermin

Affected ranges

Type
GIT
Repo
https://github.com/webmin/usermin
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected

Affected versions

1.*

1.803
1.810
1.812
1.820
1.823
1.830
1.832
1.833
1.834
1.840
1.841
1.850
1.851
1.852
1.853
1.854
1.860
1.861

2.*

2.000