CVE-2023-41155

Summary

A Stored Cross-Site Scripting (XSS) vulnerability in the mail forwarding and replies tab in Webmin and Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the forward to field while creating a mail forwarding rule.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://webmin.com/tags/webmin-changelog/
• https://github.com/shindeanik/Usermin-2.000/blob/main/CVE-2023-41155

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://webmin.com/tags/webmin-changelog/
• https://github.com/shindeanik/Usermin-2.000/blob/main/CVE-2023-41155

• ←Previous
• Next→