PT-2017-19446 · Webmin · Webmin

Publicado 2017-10-18 · Atualizado 2017-10-18

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions webmin versions prior to 1.840

Description A cross-site scripting (XSS) issue and an issue due to improper escaping in the download module have been identified. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited. Technical details about exploitation include improper escaping in the download module.

Recommendations For versions prior to 1.840, update to version 1.840 to resolve the issue. As a temporary workaround, consider restricting access to the download module until the update is applied.

Identificadores relacionados

MGASA-2017-0376

Produtos afetados

Webmin

Referências · 5

• https://bugs.mageia.org/show_bug.cgi?id=21863 · Nota
• http://webmin.com · Nota
• http://webmin.com/changes.html · Nota
• https://advisories.mageia.org/MGASA-2017-0376.html · Nota de Segurança
• https://osv.dev/vulnerability/MGASA-2017-0376 · Aviso do Fabricante