CVE-2022-3844
CVSS V2 None
CVSS V3 Medium 6.1
Description
A vulnerability, which was classified as problematic, was found in Webmin 2.001. Affected is an unknown function of the file xterm/index.cgi. The manipulation leads to basic cross site scripting. It is possible to launch the attack remotely. Upgrading to version 2.003 is able to address this issue. The name of the patch is d3d33af3c0c3fd3a889c84e287a038b7a457d811. It is recommended to upgrade the affected component. VDB-212862 is the identifier assigned to this vulnerability.
Overview
- CVE ID
- CVE-2022-3844
- Assigner
- cna@vuldb.com
- Vulnerability Status
- Analyzed
- Published Version
- 2022-11-02T20:15:11
- Last Modified Date
- 2023-03-01T18:16:13
Weakness Enumerations
CPE Configuration (Product)
| CPE | Vulnerable | Operator | Version Start | Version End |
|---|---|---|---|---|
| cpe:2.3:a:webmin:webmin:*:*:*:*:*:*:*:* | 1 | OR | 2022-10-30 |
CVSS Version 3
- Version
- 3.1
- Vector String
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- Attack Vector
- NETWORK
- Attack Compatibility
- LOW
- Privileges Required
- NONE
- User Interaction
- REQUIRED
- Scope
- CHANGED
- Confidentiality Impact
- LOW
- Availability Impact
- NONE
- Base Score
- 6.1
- Base Severity
- MEDIUM
- Exploitability Score
- 2.8
- Impact Score
- 2.7
References
| Reference URL | Reference Tags |
|---|---|
| https://github.com/webmin/webmin/commit/d3d33af3c0c3fd3a889c84e287a038b7a457d811 | Patch Third Party Advisory |
| https://github.com/webmin/webmin/releases/tag/2.003 | |
| https://vuldb.com/?ctiid.212862 | |
| https://vuldb.com/?id.212862 | Permissions Required Third Party Advisory |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2022-3844 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3844 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2022-11-02 21:00:13 | Added to TrackCVE | |||
| 2022-12-07 17:20:39 | 2022-11-02T20:15Z | 2022-11-02T20:15:11 | CVE Published Date | updated |
| 2022-12-07 17:20:39 | 2022-11-04T01:29:51 | CVE Modified Date | updated | |
| 2022-12-07 17:20:39 | Analyzed | Vulnerability Status | updated | |
| 2022-12-07 17:20:41 | CPE Information | updated | ||
| 2023-01-26 23:15:02 | 2023-01-26T21:15:59 | CVE Modified Date | updated | |
| 2023-01-26 23:15:02 | Analyzed | Modified | Vulnerability Status | updated |
| 2023-01-26 23:15:04 | Weakness Enumeration | update | ||
| 2023-01-26 23:15:05 | A vulnerability, which was classified as problematic, was found in Webmin. Affected is an unknown function of the file xterm/index.cgi. The manipulation leads to basic cross site scripting. It is possible to launch the attack remotely. The name of the patch is d3d33af3c0c3fd3a889c84e287a038b7a457d811. It is recommended to apply a patch to fix this issue. VDB-212862 is the identifier assigned to this vulnerability. | A vulnerability, which was classified as problematic, was found in Webmin 2.001. Affected is an unknown function of the file xterm/index.cgi. The manipulation leads to basic cross site scripting. It is possible to launch the attack remotely. Upgrading to version 2.003 is able to address this issue. The name of the patch is d3d33af3c0c3fd3a889c84e287a038b7a457d811. It is recommended to upgrade the affected component. VDB-212862 is the identifier assigned to this vulnerability. | Description | updated |
| 2023-01-26 23:15:06 | References | updated | ||
| 2023-01-26 23:15:06 | CVSS V2 information | new | ||
| 2023-01-27 11:16:37 | Modified | Undergoing Analysis | Vulnerability Status | updated |
| 2023-01-27 11:16:39 | CVSS V2 information | new | ||
| 2023-03-01 19:13:41 | 2023-03-01T18:16:13 | CVE Modified Date | updated | |
| 2023-03-01 19:13:41 | Undergoing Analysis | Analyzed | Vulnerability Status | updated |
| 2023-03-01 19:13:42 | CVSS V2 information | new |