CVE-2017-9313 - Multiple Cross-site scripting (XSS) vulnerabilities in Webmin before 1.850 allow remote attackers to inject arbitrary web script or HTML via the sec parameter to view_man.cgi, the referers parameter to change_referers.cgi, or the name parameter to save_user.cgi

Back Back to CVE browser

MEDIUM

Multiple Cross-site scripting (XSS) vulnerabilities in Webmin before 1.850 allow remote attackers to inject arbitrary web script or HTML via the sec parameter to view_man.cgi, the referers parameter to change_referers.cgi, or the name parameter to save_user.cgi

Published Jul 4, 2017

6.1

MEDIUM

CVSS 3.0

EPSS 1.39%

Description

Multiple Cross-site scripting (XSS) vulnerabilities in Webmin before 1.850 allow remote attackers to inject arbitrary web script or HTML via the sec parameter to view_man.cgi, the referers parameter to change_referers.cgi, or the name parameter to save_user.cgi. NOTE: these issues were not fixed in 1.840.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (6)

http://seclists.org/bugtraq/2017/Jul/3
x_refsource_MISCExploitThird Party Advisory
http://www.securityfocus.com/bid/99373
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1038814
vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
http://www.webmin.com/changes.html
x_refsource_MISCRelease NotesVendor Advisory
https://github.com/webmin/webmin/commit/a330e913ee099cb9c586ce1b9267647fc566c1ab
x_refsource_MISCPatchThird Party Advisory
https://github.com/webmin/webmin/commit/c2d4a90639afb2403979aa91ba75cb332ae16d1b
x_refsource_MISCPatchThird Party Advisory

Link	Providers	Tags
http://seclists.org/bugtraq/2017/Jul/3		x_refsource_MISCExploitThird Party Advisory
http://www.securityfocus.com/bid/99373		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1038814		vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
http://www.webmin.com/changes.html		x_refsource_MISCRelease NotesVendor Advisory
https://github.com/webmin/webmin/commit/a330e913ee099cb9c586ce1b9267647fc566c1ab		x_refsource_MISCPatchThird Party Advisory
https://github.com/webmin/webmin/commit/c2d4a90639afb2403979aa91ba75cb332ae16d1b		x_refsource_MISCPatchThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jul 4, 2017

Updated Aug 5, 2024

Reserved May 30, 2017

Link CVE-2017-9313

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2017-9313

Red Hat

Severity n/a

Public date n/a

Links CVE-2017-9313