CVE-2022-3844

A vulnerability, which was classified as problematic, was found in Webmin 2.001. Affected is an unknown function of the file xterm/index.cgi. The manipulation leads to basic cross site scripting. It is possible to launch the attack remotely. Upgrading to version 2.003 is able to address this issue. The patch is identified as d3d33af3c0c3fd3a889c84e287a038b7a457d811. It is recommended to upgrade the affected component. VDB-212862 is the identifier assigned to this vulnerability.

• CWE-80
• CWE-79

• https://github.com/webmin/webmin/commit/d3d33af3c0c3fd3a889c84e287a038b7a457d811Patch
• https://github.com/webmin/webmin/releases/tag/2.003Release Notes
• https://vuldb.com/?ctiid.212862Third Party Advisory, VDB Entry
• https://vuldb.com/?id.212862Permissions Required, Third Party Advisory, VDB Entry
• https://github.com/webmin/webmin/commit/d3d33af3c0c3fd3a889c84e287a038b7a457d811Patch
• https://github.com/webmin/webmin/releases/tag/2.003Release Notes
• https://vuldb.com/?ctiid.212862Third Party Advisory, VDB Entry
• https://vuldb.com/?id.212862Permissions Required, Third Party Advisory, VDB Entry

Published

Nov 2, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-38434Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (an…7.8
• CVE-2022-38435Adobe Illustrator versions 26.4 (and earlier) and 25.4.7 (an…7.8
• CVE-2022-38436Adobe Illustrator versions 26.4 (and earlier) and 25.4.7 (an…7.8
• CVE-2022-38437Adobe Acrobat Reader versions 22.002.20212 (and earlier) and…5.5
• CVE-2022-38438Adobe Experience Manager versions 6.5.13.0 (and earlier) is …5.4
• CVE-2022-38439Adobe Experience Manager versions 6.5.13.0 (and earlier) is …5.4
• CVE-2022-38440Adobe Dimension versions 3.4.5 is affected by an out-of-boun…7.8
• CVE-2022-38441Adobe Dimension versions 3.4.5 is affected by an out-of-boun…7.8
• CVE-2022-38442Adobe Dimension versions 3.4.5 is affected by a Use After Fr…7.8
• CVE-2022-38443Adobe Dimension versions 3.4.5 is affected by an out-of-boun…5.5
• CVE-2022-38444Adobe Dimension versions 3.4.5 is affected by a Use After Fr…7.8
• CVE-2022-38445Adobe Dimension versions 3.4.5 is affected by a Use After Fr…7.8