CVE-2022-36446

Critical

software/apt-lib.pl in Webmin before 1.997 lacks HTML escaping for a UI command.

mitre·CWE-116·Published 2022-07-25

CVSS

9.8

EPSS

0.96

KEV

Exploits

cve.orgen

80 chars

software/apt-lib.pl in Webmin before 1.997 lacks HTML escaping for a UI command.

NVDen

80 chars

software/apt-lib.pl in Webmin before 1.997 lacks HTML escaping for a UI command.

NVDes

134 chars

El archivo software/apt-lib.pl en Webmin versiones anteriores a 1.997, carece de escape HTML para un comando de la Interfaz de Usuario

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	NVD	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H