Webmin Cross-site Request Forgery Vulnerability (CNVD-2022-61349)

Webmin is a set of Web-based system administration tools for Unix-like operating systems from the Webmin community.A cross-site request forgery vulnerability exists in Webmin version 1.973, which stems from the lack of token validation for cross-site request forgery in the upload and download functions. An attacker could use this vulnerability to spoof malicious requests to trick victims into clicking through to perform sensitive actions.