PT-2023-27731
CVE-2023-40984
·
تاريخ النشر
2023-09-14
·
تاريخ التحديث
2023-09-20
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Webmin version 2.100
Description
A reflected cross-site scripting (XSS) issue in the File Manager function allows attackers to execute malicious scripts by injecting a crafted payload into the Replace in Results file. This enables the execution of malicious scripts.
Recommendations
For Webmin version 2.100, consider disabling the File Manager function until a patch is available to prevent exploitation of the reflected cross-site scripting issue. Restrict access to the Replace in Results file to minimize the risk of malicious script injection.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾