CVE-2014-3884: XSS
Published Jul 20, 2014
·Updated
Cross-site scripting (XSS) vulnerability in Usermin before 1.600 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2014-3924.
Affected Software
76 affected components
Webmin Usermin<=1.590
Webmin Usermin=0.4
Webmin Usermin=0.5
Webmin Usermin=0.6
Webmin Usermin=0.7
Webmin Usermin=0.80
Webmin Usermin=0.90
Webmin Usermin=0.910
Webmin Usermin=0.929
Webmin Usermin=0.930
Webmin Usermin=0.940
Webmin Usermin=0.950
Webmin Usermin=0.960
Webmin Usermin=0.970
Webmin Usermin=0.980
Webmin Usermin=0.990
Webmin Usermin=1.000
Webmin Usermin=1.010
Webmin Usermin=1.020
Webmin Usermin=1.030
Webmin Usermin=1.040
Webmin Usermin=1.050
Webmin Usermin=1.051
Webmin Usermin=1.060
Webmin Usermin=1.070
Webmin Usermin=1.080
Webmin Usermin=1.090
Webmin Usermin=1.100
Webmin Usermin=1.110
Webmin Usermin=1.120
Webmin Usermin=1.130
Webmin Usermin=1.140
Webmin Usermin=1.150
Webmin Usermin=1.160
Webmin Usermin=1.170
Webmin Usermin=1.180
Webmin Usermin=1.190
Webmin Usermin=1.200
Webmin Usermin=1.210
Webmin Usermin=1.220
Webmin Usermin=1.230
Webmin Usermin=1.240
Webmin Usermin=1.250
Webmin Usermin=1.260
Webmin Usermin=1.270
Webmin Usermin=1.280
Webmin Usermin=1.290
Webmin Usermin=1.300
Webmin Usermin=1.310
Webmin Usermin=1.320
Webmin Usermin=1.330
Webmin Usermin=1.340
Webmin Usermin=1.350
Webmin Usermin=1.360
Webmin Usermin=1.370
Webmin Usermin=1.380
Webmin Usermin=1.390
Webmin Usermin=1.400
Webmin Usermin=1.410
Webmin Usermin=1.420
Webmin Usermin=1.430
Webmin Usermin=1.440
Webmin Usermin=1.450
Webmin Usermin=1.460
Webmin Usermin=1.470
Webmin Usermin=1.480
Webmin Usermin=1.490
Webmin Usermin=1.500
Webmin Usermin=1.510
Webmin Usermin=1.520
Webmin Usermin=1.530
Webmin Usermin=1.540
Webmin Usermin=1.550
Webmin Usermin=1.560
Webmin Usermin=1.570
Webmin Usermin=1.580
Event History
Jul 20, 2014
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-3884?
CVE-2014-3884 has a severity rating that can be classified as medium due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2014-3884?
To fix CVE-2014-3884, upgrade Usermin to version 1.600 or later.
3
What types of attacks does CVE-2014-3884 allow?
CVE-2014-3884 allows remote attackers to inject arbitrary web scripts or HTML into affected Usermin applications.
4
Which versions of Usermin are affected by CVE-2014-3884?
CVE-2014-3884 affects all Usermin versions prior to 1.600.
5
Is there a workaround for CVE-2014-3884?
There are no specific workarounds for CVE-2014-3884; upgrading to the latest version is the recommended action.