CVE-2023-38303: XSS
Published Jul 31, 2023
·Updated
An issue was discovered in Webmin 2.021. One can exploit a stored Cross-Site Scripting (XSS) attack to achieve Remote Command Execution (RCE) through the Users and Group's real name parameter.
Affected Software
1 affected component
webmin webmin=2.021
Event History
Jul 31, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this issue in Webmin 2.021?
The vulnerability ID for this issue in Webmin 2.021 is CVE-2023-38303.
2
What is the severity rating of CVE-2023-38303?
The severity rating of CVE-2023-38303 is medium.
3
How does the vulnerability in Webmin 2.021 allow for remote command execution (RCE)?
The vulnerability in Webmin 2.021 allows for remote command execution (RCE) through the Users and Group's real name parameter.
4
Which version of Webmin is affected by CVE-2023-38303?
CVE-2023-38303 affects Webmin version 2.021.
5
Is there a public reference available for more information about CVE-2023-38303?
Yes, you can find more information about CVE-2023-38303 at the following references: [Link 1](https://github.com/jaysharma786/Webmin-2.021/blob/main/CVE-2023-38303) and [Link 2](https://webmin.com/tags/webmin-changelog/).