Lucene search

GoogleOSV:CVE-2023-41163

HistoryAug 30, 2023 - 10:15 p.m.

CVE-2023-41163

2023-08-3022:15:10

Google

osv.dev

usermin

xss

file manager

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

JSON

A Reflected Cross-site scripting (XSS) vulnerability in the file manager tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the replace in results field while replacing the results under the tools drop down.

CPENameOperatorVersion
webmineq1.970
webmineq1.730
webmineq1.999
webmineq1.974
webmineq1.700
webmineq1.900
webmineq1.953
webmineq1.972
webmineq1.973
webmineq1.983

Name	Operator	Version
webmin	eq	1.970
webmin	eq	1.730
webmin	eq	1.999
webmin	eq	1.974
webmin	eq	1.700
webmin	eq	1.900
webmin	eq	1.953
webmin	eq	1.972
webmin	eq	1.973
webmin	eq	1.983

Rows per page:

1-10 of 541

References

github.com/shindeanik/Usermin-2.000/blob/main/CVE-2023-41163

webmin.com/tags/webmin-changelog/

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

JSON

Related for OSV:CVE-2023-41163