CVE-2024-36450

Name of the Vulnerable Software and Affected Versions Webmin versions prior to 1.910

Description A cross-site scripting vulnerability exists in the sysinfo.cgi of Webmin. If this issue is exploited, an arbitrary script may be executed on the web browser of the user who accessed the website using the product. As a result, a session ID may be obtained, a webpage may be altered, or a server may be halted.

Recommendations For Webmin versions prior to 1.910, update to version 1.910 or later to resolve the issue. As a temporary workaround, consider restricting access to the sysinfo.cgi script until a patch is applied.