Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-273g-8x52-9gmv

Опубликовано: 10 июл. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

Cross-site scripting vulnerability exists in sysinfo.cgi of Webmin versions prior to 1.910. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the website using the product. As a result, a session ID may be obtained, a webpage may be altered, or a server may be halted.

Cross-site scripting vulnerability exists in sysinfo.cgi of Webmin versions prior to 1.910. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the website using the product. As a result, a session ID may be obtained, a webpage may be altered, or a server may be halted.

EPSS

Процентиль: 24%
0.00077
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
12 месяцев назад

Cross-site scripting vulnerability exists in sysinfo.cgi of Webmin versions prior to 1.910. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the website using the product. As a result, a session ID may be obtained, a webpage may be altered, or a server may be halted.

CVSS3: 5.4
debian
12 месяцев назад

Cross-site scripting vulnerability exists in sysinfo.cgi of Webmin ver ...

CVSS3: 5.4
fstec
12 месяцев назад

Уязвимость реализации сценария sysinfo.cgi панели управления хостингом Webmin, позволяющая нарушителю выполнить произвольный скрипт

CVSS3: 5.4
redos
9 месяцев назад

Уязвимость webmin

EPSS

Процентиль: 24%
0.00077
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79