CVE-2023-38304

Description

An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the Users and Groups functionality, allowing an attacker to store a malicious payload in the Group Name field when creating a new group.

Reserved 2023-07-14 | Published 2023-07-31 | Updated 2024-10-18 | Assigner mitre

References

webmin.com/tags/webmin-changelog/

github.com/...harma786/Webmin-2.021/blob/main/CVE-2023-38304

cve.org (CVE-2023-38304)

nvd.nist.gov (CVE-2023-38304)

Download JSON