CVE-2023-40985 - An issue was discovered in Webmin 2.100 · CoreCVE

Back Back to CVE browser

MEDIUM

An issue was discovered in Webmin 2.100

Published Sep 15, 2023

5.4

MEDIUM

CVSS 3.1

EPSS 0.47%

Description

An issue was discovered in Webmin 2.100. The File Manager functionality allows an attacker to exploit a Cross-Site Scripting (XSS) vulnerability. By providing a malicious payload, an attacker can inject arbitrary code, which is then executed within the context of the victim's browser when any file is searched/replaced.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (1)

https://github.com/Vi39/Webmin-2.100/blob/main/CVE-2023-40985
ExploitThird Party Advisory

Link	Providers	Tags
https://github.com/Vi39/Webmin-2.100/blob/main/CVE-2023-40985		ExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Sep 15, 2023

Updated Jul 9, 2026

Reserved Aug 22, 2023

Link CVE-2023-40985

CISA Vulnrichment

Updated Sep 25, 2024

Status Modified

Modified Jul 9, 2026

Link CVE-2023-40985

Severity n/a

Public date n/a

Links CVE-2023-40985