PT-2024-5735 · Webmin+1 · Webmin+1
CVSS v3.1
3.1
Low
| Vector | AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Webmin versions prior to 2.003
Description
A cross-site request forgery vulnerability exists in the ajaxterm module. If exploited, unintended operations may be performed when a user views a malicious page while logged in, potentially allowing data within a system to be referred, a webpage to be altered, or a server to be permanently halted.
Recommendations
For versions prior to 2.003, update to version 2.003 or later to resolve the issue.
As a temporary workaround, consider disabling the ajaxterm module until a patch is available.
Restrict access to the ajaxterm module to minimize the risk of exploitation.
Exploit
Fix
CSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Red Os
Webmin