PT-2021-19494

CVE-2021-31760

·

Published

2021-04-25

·

Updated

2021-04-28

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Webmin version 1.973
Description The issue allows for Cross Site Request Forgery (CSRF) to achieve Remote Command Execution (RCE) through Webmin's running process feature. This means an attacker could potentially execute commands on a remote system without proper authorization.
Recommendations For Webmin version 1.973, consider disabling the running process feature as a temporary workaround until a patch is available. Restrict access to Webmin's running process feature to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾