CVE-2018-19191: XSS
First published: Thu Mar 21 2019(Updated: )
Webmin 1.890 has XSS via /config.cgi?webmin, the /shell/index.cgi history parameter, /shell/index.cgi?stripped=1, or the /webminlog/search.cgi uall or mall parameter.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Webmin Webmin | =1.890 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2018-19191?
CVE-2018-19191 refers to a vulnerability in Webmin 1.890 that allows for cross-site scripting.
How severe is CVE-2018-19191?
CVE-2018-19191 has a severity rating of medium with a CVSS score of 5.4.
What is the affected software version for CVE-2018-19191?
The affected software version for CVE-2018-19191 is Webmin 1.890.
What is the CWE category for CVE-2018-19191?
CVE-2018-19191 falls under CWE category 79, which is Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').
How can I fix CVE-2018-19191?
To fix CVE-2018-19191, it is recommended to update Webmin to a version that has addressed the vulnerability.
- collector/nvd-index
- vendor/webmin
- canonical/webmin webmin
- version/webmin webmin/1.890