CVE-2023-41161
N/A
N/A
Summary
Multiple stored cross-site scripting (XSS) vulnerabilities in Usermin 2.000 allow remote attackers to inject arbitrary web script or HTML via the key comment to different pages such as public key details, Export key, sign key, send to key server page, and fetch from key server page tab.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- https://webmin.com/tags/webmin-changelog/
- https://github.com/shindeanik/Usermin-2.000/blob/main/CVE-2023-41161
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
References
- https://webmin.com/tags/webmin-changelog/
- https://github.com/shindeanik/Usermin-2.000/blob/main/CVE-2023-41161
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.