CVE-2023-38303 | BDVDB-2026-208368 Detail

Description#

An issue was discovered in Webmin 2.021. One can exploit a stored Cross-Site Scripting (XSS) attack to achieve Remote Command Execution (RCE) through the Users and Group's real name parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://webmin.com/tags/webmin-changelog/
https://github.com/jaysharma786/Webmin-2.021/blob/main/CVE-2023-38303

Exploit#

No public exploit known

History#

Version 12023-07-31Record published in the CVE List.
Version 22024-10-22Most recent update recorded in the CVE List.