Security Advisory
CVE-2023-38305
6.1
MEDIUM
Vulnerability Description
An issue was discovered in Webmin 2.021. The download functionality allows an attacker to exploit a Cross-Site Scripting (XSS) vulnerability. By providing a crafted download path containing a malicious payload, an attacker can inject arbitrary code, which is then executed within the context of the victim's browser when the download link is accessed.
Published Date
July 31, 2023
Official Source
NIST NVD Advisory