CVE-2023-52046
CVSS 3.1 Score 4.8 of 10 (medium)
Details
Published Jan 25, 2024
Updated: Feb 13, 2024
CWE ID 79
Summary
CVE-2023-52046 is a Cross-Site Scripting (XSS) vulnerability affecting webmin versions 2.105 and earlier. An attacker can exploit this flaw by crafting a malicious payload and inputting it into the "Execute cron job as" tab's Input field. Successful exploitation leads to the execution of arbitrary code, potentially allowing unauthorized access to user data or system functions. Webmin users are advised to update to the latest version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- Webmin
Affected Vendors
- The Webmin Community