Browser script execution via reflected package query
Published Jul 31, 2023 · Updated Oct 22, 2024
Reflected XSS in Webmin 2.021 package search allows remote attackers to execute JavaScript in a victim's browser through a crafted query. The package-search response places the Search for Package value into generated HTML without neutralizing script markup, so a closing script tag is interpreted as code. Exploitation requires a victim to submit or follow attacker-controlled search input; successful code can read or alter page data available to that Webmin browser session.
Summary
What happened
Reflected XSS in Webmin 2.021 package search allows remote attackers to execute JavaScript in a victim's browser through a crafted query. The package-search response places the Search for Package value into generated HTML without neutralizing script markup, so a closing script tag is interpreted as code. Exploitation requires a victim to submit or follow attacker-controlled search input; successful code can read or alter page data available to that Webmin browser session.
The record
- CVE
- CVE-2023-38309
- Published
- Jul 31, 2023
- Updated
- Oct 22, 2024
- Vendor
- Unknown vendor
- Product
- Unknown product
- Classifications
- CWE-79, T1189
- Attack vector
- network
- Privileges
- unauthenticated
Timeline
How it unfolded
- Jul 31, 2023CVE publishedPublication date reported by the CVE source.
- Oct 22, 2024Record updatedLatest update available in the CVE record.
Exploitability
Present is not the same as exploitable
Compare your product and version with the public record. A matching version still requires validation against your environment.
Is a vulnerable build present?
What conditions does exploitation require?
What is affected?
Affected products and versions are unavailable in this record.
Published CVSS scores
CVSS describes severity. EPSS estimates exploitation probability.
Attacks
What attackers are doing with it
Daily unique IPs observed by Shadowserver honeypots for known exploited vulnerabilities (KEVs). Missing observations do not establish an absence of attacks.
Weakness, pattern, technique
Public exploit references
- Reflected package-search XSS proof of conceptfunctional · demonstrated
Labels summarize the accepted research assessment. They do not indicate a test against your environment.
Technologies
Your stack
See the directory against your own environment.
Your stack
Check the software in your environment
Book a demo to see how Hinoki identifies affected software and validates exploitability in your environment.
Book a demo