An issue was discovered in Webmin 2.021. A Cross-Site Scripting (XSS) vulnerability was discovered in the HTTP Tunnel functionality when handling third-party domain URLs. By providing a crafted URL from a third-party domain, an attacker can inject malicious code. leading to the execution of arbitrary JavaScript code within the context of the victim's browser.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2023-07-31T00:00:00
Updated: 2024-08-02T17:39:12.247Z
Reserved: 2023-07-14T00:00:00
Link: CVE-2023-38308
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2023-07-31T15:15:10.787
Modified: 2023-08-04T12:56:40.287
Link: CVE-2023-38308
Redhat
No data.