CSRF Vulnerability in Webmin by Virtualmin
CVE-2017-15645

8.8HIGH

Key Information:

Vendor: Webmin
Status: Webmin
Vendor: CVE Published:; 19 October 2017

What is CVE-2017-15645?

A Cross-Site Request Forgery (CSRF) vulnerability exists in Webmin 1.850. This vulnerability allows attackers to send crafted GET requests to the at/create_job.cgi endpoint with parameters dir=/&cmd= in the URI, enabling them to execute arbitrary commands on the affected system. This flaw poses a significant threat to system integrity and could potentially lead to unauthorized control, making it crucial for users to update and secure their Webmin installations.