Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w2jv-599h-mr48

Опубликовано: 10 июл. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

Cross-site scripting vulnerability exists in session_login.cgi of Webmin versions prior to 1.970 and Usermin versions prior to 1.820. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the website using the product. As a result, a webpage may be altered or sensitive information such as a credential may be disclosed.

Cross-site scripting vulnerability exists in session_login.cgi of Webmin versions prior to 1.970 and Usermin versions prior to 1.820. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the website using the product. As a result, a webpage may be altered or sensitive information such as a credential may be disclosed.

EPSS

Процентиль: 53%
0.00298
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
nvd
больше 1 года назад

Cross-site scripting vulnerability exists in session_login.cgi of Webmin versions prior to 1.970 and Usermin versions prior to 1.820. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the website using the product. As a result, a webpage may be altered or sensitive information such as a credential may be disclosed.

CVSS3: 6.1
debian
больше 1 года назад

Cross-site scripting vulnerability exists in session_login.cgi of Webm ...

CVSS3: 6.1
fstec
больше 1 года назад

Уязвимость сценария session_login.cgi панели управления хостингом Webmin и веб-интерфейса для unix-подобных систем Usermin, позволяющая нарушителю проводить межсайтовые сценарные атаки

CVSS3: 6.1
redos
больше 1 года назад

Уязвимость webmin

EPSS

Процентиль: 53%
0.00298
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79