PT-2018-14368 · Virtualmin · Virtualmin

Publicado 2018-10-10 · Atualizado 2018-11-26 · CVE-2018-18208

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Virtualmin version 6.03

Description The issue allows for XSS via the query string. This can be demonstrated using the "webmin search.cgi" URI.

Recommendations For Virtualmin version 6.03, update to a version that includes a fix for this issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-18208

Produtos afetados

Virtualmin

Referências · 3

• https://osv.dev/vulnerability/CVE-2018-18208 · Aviso do Fabricante
• https://0day.today/exploit/description/31282 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-18208 · Nota de Segurança