CVE-2023-41163

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2023-41163

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-41163.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2023-41163

Published

2023-08-30T00:00:00Z

Modified

2026-07-15T01:49:22.470935342Z

Summary

[none]

Details

A Reflected Cross-site scripting (XSS) vulnerability in the file manager tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the replace in results field while replacing the results under the tools drop down.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/41xxx/CVE-2023-41163.json",
    "cna_assigner": "mitre"
}

References

Affected packages

Git / github.com/webmin/webmin

Affected ranges

Type

GIT

Repo

https://github.com/webmin/webmin

Events

Introduced

a20398e61d746d17cdbf6e989cea27d15a8629d7

Last affected

a20398e61d746d17cdbf6e989cea27d15a8629d7

Database specific

{
    "cpe": "cpe:2.3:a:webmin:webmin:2.000:*:*:*:*:*:*:*",
    "source": "CPE_STRING",
    "extracted_events": [
        {
            "introduced": "2.000"
        },
        {
            "last_affected": "2.000"
        }
    ]
}

Affected versions

2.*

2.000

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-41163.json"