CVE-2023-38308

Summary

CVE-2023-38308: A Cross-Site Scripting (XSS) vulnerability was discovered in Webmin 2.021's HTTP Tunnel functionality. This issue arises when handling third-party domain URLs. An attacker can exploit this weakness by crafting a malicious URL from a third-party source. Upon visiting the URL, the victim's browser executes arbitrary JavaScript code, potentially leading to data theft or unauthorized system access.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.