Lucene search
JpcertCVELIST:CVE-2024-36453HistoryJul 10, 2024 - 7:02 a.m.
CVE-2024-36453
2024-07-1007:02:17
jpcert
www.cve.org
2
webmin
usermin
cross-site scripting
vulnerability
arbitrary script
web browser
altered webpage
sensitive information
EPSS
0
Percentile
15.8%
Cross-site scripting vulnerability exists in session_login.cgi of Webmin versions prior to 1.970 and Usermin versions prior to 1.820. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the website using the product. As a result, a webpage may be altered or sensitive information such as a credential may be disclosed.
CNA Affected
[
{
"vendor": "Webmin",
"product": "Webmin",
"versions": [
{
"version": "versions prior to 1.970",
"status": "affected"
}
]
},
{
"vendor": "Webmin",
"product": "Usermin",
"versions": [
{
"version": "versions prior to 1.820",
"status": "affected"
}
]
}
]Related
vulnrichment
vulnrichment
CVE-2024-36453
2024-07-10 07:02:17
nvd
nvd
CVE-2024-36453
2024-07-10 07:15:03
redos
redos
ROS-20240917-06
2024-09-17 00:00:00
cve
cve
CVE-2024-36453
2024-07-10 07:15:03
jvn
jvn
JVN#81442045: Multiple vulnerabilities in multiple Webmin products
2024-07-09 00:00:00