CVE-2023-38308: XSS
An issue was discovered in Webmin 2.021. A Cross-Site Scripting (XSS) vulnerability was discovered in the HTTP Tunnel functionality when handling third-party domain URLs. By providing a crafted URL from a third-party domain, an attacker can inject malicious code. leading to the execution of arbitrary JavaScript code within the context of the victim's browser.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-38308?
CVE-2023-38308 is a Cross-Site Scripting (XSS) vulnerability discovered in Webmin 2.021.
How does CVE-2023-38308 affect Webmin?
CVE-2023-38308 affects Webmin version 2.021.
What is the severity of CVE-2023-38308?
The severity of CVE-2023-38308 is medium with a CVSS score of 6.1.
How can an attacker exploit CVE-2023-38308?
An attacker can exploit CVE-2023-38308 by providing a crafted URL from a third-party domain to inject malicious code.
Are there any references available for CVE-2023-38308?
Yes, you can refer to the following links: [1] https://github.com/jaysharma786/Webmin-2.021/blob/main/CVE-2023-38308 , [2] https://webmin.com/tags/webmin-changelog/