PT-2023-27839 · Usermin · Usermin

Published 2023-08-30 · Updated 2023-09-05 · CVE-2023-41163

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Usermin version 2.000

Description A Reflected Cross-site scripting (XSS) issue in the file manager tab allows remote attackers to inject arbitrary web script or HTML via the replace in results field while replacing the results under the tools drop down.

Recommendations For Usermin version 2.000, consider disabling the file manager tab or restricting access to it until a patch is available. As a temporary workaround, avoid using the replace in results field in the file manager tab under the tools drop down.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-41163

Affected Products

Usermin

References · 5

• 🔥 https://github.com/shindeanik/Usermin-2.000/blob/main/CVE-2023-41163 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-41163 · Security Note
• https://osv.dev/vulnerability/CVE-2023-41163 · Vendor Advisory
• https://t.me/cibsecurity/69491 · Telegram Post
• https://webmin.com/tags/webmin-changelog · Note