An issue was discovered in Webmin 2.021. One can exploit a stored Cross-Site Scripting (XSS) attack to achieve Remote Command Execution (RCE) through the Users and Group's real name parameter.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2023-07-31T00:00:00
Updated: 2024-08-02T17:39:12.243Z
Reserved: 2023-07-14T00:00:00
Link: CVE-2023-38303
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2023-07-31T15:15:10.487
Modified: 2023-08-04T03:55:50.193
Link: CVE-2023-38303
Redhat
No data.