CVE-2023-41162: XSS
First published: Wed Sep 13 2023(Updated: )
A Reflected Cross-site scripting (XSS) vulnerability in the file manager tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the file mask field while searching under the tools drop down.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Webmin Usermin | =2.000 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Usermin vulnerability?
The vulnerability ID for this Usermin vulnerability is CVE-2023-41162.
What is the severity level of CVE-2023-41162 vulnerability?
The severity level of CVE-2023-41162 vulnerability is medium.
What is the affected software for CVE-2023-41162 vulnerability?
The affected software for CVE-2023-41162 vulnerability is Usermin version 2.000.
How does the vulnerability in Usermin 2.000 occur?
The vulnerability in Usermin 2.000 occurs due to a Reflected Cross-site scripting (XSS) vulnerability in the file manager tab.
How can an attacker exploit CVE-2023-41162 vulnerability?
An attacker can exploit CVE-2023-41162 vulnerability by injecting arbitrary web script or HTML via the file mask field while searching under the tools drop down in Usermin 2.000.
- collector/nvd-api
- collector/nvd-index
- agent/weakness
- agent/author
- agent/references
- agent/severity
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/webmin
- canonical/webmin usermin
- version/webmin usermin/2.000