PT-2022-24410 · Webmin · Webmin

Published 2022-11-02 · Updated 2025-01-28 · CVE-2022-3844

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Webmin versions prior to 2.003

Description A problematic issue was found in Webmin, affecting an unknown function of the file xterm/index.cgi, leading to basic cross site scripting. The manipulation can be launched remotely.

Recommendations For versions prior to 2.003, upgrade to version 2.003 to address this issue.

Fix

XSS

Weakness Enumeration

CWE-80

CWE-79

Related Identifiers

CVE-2022-3844

ROSA-SA-2025-2650

Affected Products

Webmin

References · 6

• https://github.com/webmin/webmin/releases/tag/2.003 · Patch
• https://github.com/webmin/webmin/commit/d3d33af3c0c3fd3a889c84e287a038b7a457d811 · Patch
• https://osv.dev/vulnerability/CVE-2022-3844 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-3844 · Security Note
• https://vuldb.com/?ctiid.212862 · Note
• https://vuldb.com/?id.212862 · Note