PT-2019-9756
CVE-2018-19191
·
تاريخ النشر
2019-03-17
·
تاريخ التحديث
2019-03-21
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Webmin version 1.890
Description
The issue concerns an XSS vulnerability. It can be exploited via several API endpoints, including "/config.cgi?webmin", the
history parameter in "/shell/index.cgi", the "/shell/index.cgi?stripped=1" endpoint, or the uall or mall parameters in "/webminlog/search.cgi".Recommendations
For Webmin version 1.890, consider disabling access to the vulnerable API endpoints, such as "/config.cgi?webmin", "/shell/index.cgi", and "/webminlog/search.cgi", until a patch is available. Avoid using the
history, uall, and mall parameters in the affected endpoints to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾