webmin Elevation of Privilege Vulnerability (CNVD-2022-17023)

Webmin is the Webmin community’s set of Web-based system management tools for Unix-like operating systems. webmin versions prior to 1.990 have an elevation of privilege vulnerability that stems from a faulty program to high-level local procedure calls. An attacker could exploit this vulnerability to modify the operating system file system and execute operating system commands with runtime application privileges.