PT-2017-19446 · Webmin · Webmin

Published 2017-10-18 · Updated 2017-10-18

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions webmin versions prior to 1.840

Description A cross-site scripting (XSS) issue and an issue due to improper escaping in the download module have been identified. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited. Technical details about exploitation include improper escaping in the download module.

Recommendations For versions prior to 1.840, update to version 1.840 to resolve the issue. As a temporary workaround, consider restricting access to the download module until the update is applied.

Related Identifiers

MGASA-2017-0376

Affected Products

Webmin

References · 5

• https://advisories.mageia.org/MGASA-2017-0376.html · Security Note
• https://osv.dev/vulnerability/MGASA-2017-0376 · Vendor Advisory
• https://bugs.mageia.org/show_bug.cgi?id=21863 · Note
• http://webmin.com · Note
• http://webmin.com/changes.html · Note