CVE-2020-35606

Name of the Vulnerable Software and Affected Versions Webmin versions prior to 1.963

Description Arbitrary command execution can occur due to an incomplete fix for a previous issue. This allows any user authorized for the Package Updates module to execute arbitrary commands with root privileges via specific vectors involving %0A and %0C.

Recommendations For versions prior to 1.963, update to version 1.963 or later to resolve the issue. As a temporary workaround, consider restricting access to the Package Updates module to minimize the risk of exploitation.