PT-2017-14704
CVE-2017-17089
·
تاريخ النشر
2017-12-30
·
تاريخ التحديث
2018-01-12
الوصف من
CVSS 3.1
4.8
متوسطةالمقاييسAV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Webmin versions prior to 1.870
Description
The issue allows remote authenticated administrators to conduct cross-site scripting (XSS) attacks. This is achieved by exploiting the description field in the custom command functionality of the custom/run.cgi module.
Recommendations
For versions prior to 1.870, update to version 1.870 or later to resolve the issue. As a temporary workaround, consider restricting access to the custom command functionality to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾