Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-3844

A vulnerability, which was classified as problematic, was found in Webmin 2.001. Affected is an unknown function of the file xterm/index.cgi. The manipulation leads to basic cross site scripting. It is possible to launch the attack remotely. Upgrading to version 2.003 is able to address this issue. The patch is identified as d3d33af3c0c3fd3a889c84e287a038b7a457d811. It is recommended to upgrade the affected component. VDB-212862 is the identifier assigned to this vulnerability.

Published

2022-11-02T20:15:11.023

Last Modified

2024-11-21T07:20:21.160

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 3.5 (LOW)

CVSSv2 Vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Access Vector: NETWORK
Access Complexity: LOW
Authentication: SINGLE
Confidentiality Impact: NONE
Integrity Impact: PARTIAL
Availability Impact: NONE

Exploitability Score

8.0

Impact Score

2.9

Weaknesses

Type: Secondary
CWE-80
Type: Primary
CWE-79

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	webmin	webmin	2.001	Yes

References

https://github.com/webmin/webmin/commit/d3d33af3c0c3fd3a889c84e287a038b7a457d811 Patch ([email protected])
https://github.com/webmin/webmin/releases/tag/2.003 Release Notes ([email protected])
https://vuldb.com/?ctiid.212862 Third Party Advisory, VDB Entry ([email protected])
https://vuldb.com/?id.212862 Permissions Required, Third Party Advisory, VDB Entry ([email protected])
https://github.com/webmin/webmin/commit/d3d33af3c0c3fd3a889c84e287a038b7a457d811 Patch (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/webmin/webmin/releases/tag/2.003 Release Notes (af854a3a-2127-422b-91ae-364da2661108)
https://vuldb.com/?ctiid.212862 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://vuldb.com/?id.212862 Permissions Required, Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)