Lucene search
MitreCVELIST:CVE-2023-38308HistoryJul 31, 2023 - 12:00 a.m.
CVE-2023-38308
2023-07-3100:00:00
mitre
www.cve.org
3
cve-2023-38308
cross-site scripting
third-party domain
arbitrary javascript code
EPSS
0.001
Percentile
46.5%
An issue was discovered in Webmin 2.021. A Cross-Site Scripting (XSS) vulnerability was discovered in the HTTP Tunnel functionality when handling third-party domain URLs. By providing a crafted URL from a third-party domain, an attacker can inject malicious code. leading to the execution of arbitrary JavaScript code within the context of the victim’s browser.
Related
prion
prion
Cross site scripting
2023-07-31 15:15:00
osv
osv
CVE-2023-38308
2023-07-31 15:15:10
cve
cve
CVE-2023-38308
2023-07-31 15:15:10
nvd
nvd
CVE-2023-38308
2023-07-31 15:15:10
redos
redos
ROS-20240918-04
2024-09-18 00:00:00