CVE-2023-41160

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2023-41160

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-41160.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2023-41160

Published

2023-09-14T00:00:00Z

Modified

2026-07-08T07:34:16.114796676Z

Summary

[none]

Details

A Stored Cross-Site Scripting (XSS) vulnerability in the SSH configuration tab in Usermin 2.001 allows remote attackers to inject arbitrary web script or HTML via the key name field while adding an authorized key.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/41xxx/CVE-2023-41160.json",
    "cna_assigner": "mitre"
}

References

Affected packages

Git / github.com/webmin/usermin

Affected ranges

Type

GIT

Repo

https://github.com/webmin/usermin

Events

Introduced

73f8aa6c6f570a6cff31e95a5c4b27b25e7f3aa8

Last affected

73f8aa6c6f570a6cff31e95a5c4b27b25e7f3aa8

Database specific

{
    "cpe": "cpe:2.3:a:webmin:usermin:2.001:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "2.001"
        },
        {
            "last_affected": "2.001"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

2.*

2.001

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-41160.json"