CVE-2023-41156

Source
https://cve.org/CVERecord?id=CVE-2023-41156
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-41156.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-41156
Published
2023-09-14T21:15:10.630Z
Modified
2025-11-15T06:49:34.654725Z
Severity
  • 5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

A Stored Cross-Site Scripting (XSS) vulnerability in the filter and forward mail tab in Usermin 2.001 allows remote attackers to inject arbitrary web script or HTML via the save to new folder named field while creating a new filter.

References

Affected packages

Git / github.com/webmin/usermin

Affected ranges

Type
GIT
Repo
https://github.com/webmin/usermin
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected

Affected versions

1.*
1.803
1.810
1.812
1.820
1.823
1.830
1.832
1.833
1.834
1.840
1.841
1.850
1.851
1.852
1.853
1.854
1.860
1.861
2.*
2.000
2.001

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-41156.json"