CVE-2023-38306

creationtimestamp| type| source ---|---|--- 2023-07-31 18:37:59+00:00| seen| https://t.me/cibsecurity/67464...

CVE-2023-38306

An issue was discovered in Webmin 2.021. A Cross-site Scripting XSS Bypass vulnerability was discovered in the file upload functionality. Normally, the application restricts the upload of certain file types such as .svg, .php, etc., and displays an error message if a prohibited file type is...

CVE-2023-38306

An issue was discovered in Webmin 2.021. A Cross-site Scripting XSS Bypass vulnerability was discovered in the file upload functionality. Normally, the application restricts the upload of certain file types such as .svg, .php, etc., and displays an error message if a prohibited file type is...

CVE-2023-38306

CVE-2023-38306 affects Webmin 2.021. The vulnerability is a Cross-site Scripting (XSS) bypass in the file upload functionality, where the app’s restrictions on certain file types (e.g., .svg, .php) can be bypassed by following specific steps, allowing an attacker to inject malicious code. The roo...