Vulnerability Description
Multiple Cross-site scripting (XSS) vulnerabilities in Webmin before 1.850 allow remote attackers to inject arbitrary web script or HTML via the sec parameter to view_man.cgi, the referers parameter to change_referers.cgi, or the name parameter to save_user.cgi. NOTE: these issues were not fixed in 1.840.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Webmin | Webmin | <= 1.840 |
Related Weaknesses (CWE)
References
- http://seclists.org/bugtraq/2017/Jul/3ExploitThird Party Advisory
- http://www.securityfocus.com/bid/99373Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1038814Third Party AdvisoryVDB Entry
- http://www.webmin.com/changes.htmlRelease NotesVendor Advisory
- https://github.com/webmin/webmin/commit/a330e913ee099cb9c586ce1b9267647fc566c1abPatchThird Party Advisory
- https://github.com/webmin/webmin/commit/c2d4a90639afb2403979aa91ba75cb332ae16d1bPatchThird Party Advisory
- http://seclists.org/bugtraq/2017/Jul/3ExploitThird Party Advisory
- http://www.securityfocus.com/bid/99373Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1038814Third Party AdvisoryVDB Entry
- http://www.webmin.com/changes.htmlRelease NotesVendor Advisory
- https://github.com/webmin/webmin/commit/a330e913ee099cb9c586ce1b9267647fc566c1abPatchThird Party Advisory
- https://github.com/webmin/webmin/commit/c2d4a90639afb2403979aa91ba75cb332ae16d1bPatchThird Party Advisory
FAQ
What is CVE-2017-9313?
CVE-2017-9313 is a vulnerability with a CVSS score of 6.1 (MEDIUM). Multiple Cross-site scripting (XSS) vulnerabilities in Webmin before 1.850 allow remote attackers to inject arbitrary web script or HTML via the sec parameter to view_man.cgi, the referers parameter t...
How severe is CVE-2017-9313?
CVE-2017-9313 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-9313?
Check the references section above for vendor advisories and patch information. Affected products include: Webmin Webmin.