Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2gmj-rvcm-f6j2

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

An Improper Data Validation Vulnerability exists in Webmin 1.941 and earlier affecting the Command Shell Endpoint. A user may enter HTML code into the Command field and submit it. Then, after visiting the Action Logs Menu and displaying logs, the HTML code will be rendered (however, JavaScript is not executed). Changes are kept across users.

An Improper Data Validation Vulnerability exists in Webmin 1.941 and earlier affecting the Command Shell Endpoint. A user may enter HTML code into the Command field and submit it. Then, after visiting the Action Logs Menu and displaying logs, the HTML code will be rendered (however, JavaScript is not executed). Changes are kept across users.

EPSS

Процентиль: 85%
0.02482
Низкий

Дефекты

CWE-74

Связанные уязвимости

CVSS3: 5.4
nvd
больше 5 лет назад

An Improper Data Validation Vulnerability exists in Webmin 1.941 and earlier affecting the Command Shell Endpoint. A user may enter HTML code into the Command field and submit it. Then, after visiting the Action Logs Menu and displaying logs, the HTML code will be rendered (however, JavaScript is not executed). Changes are kept across users.

CVSS3: 5.4
debian
больше 5 лет назад

An Improper Data Validation Vulnerability exists in Webmin 1.941 and e ...

EPSS

Процентиль: 85%
0.02482
Низкий

Дефекты

CWE-74