CVE-2022-0824

🗓️ 02 Mar 2022 00:00:00Reported by @huntrdevType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 234 Views🌐 WEB

Improper Access Control to Remote Code Execution in GitHub repository webmin/webmin prior to 1.990. NV

Reporter	Title	Published	Views	Family All 34
0day.today	Webmin 1.984 - Remote Code Execution (Authenticated) Exploit	9 Mar 202200:00	–	zdt
0day.today	Webmin 1.984 File Manager Remote Code Execution Exploit	2 Nov 202200:00	–	zdt
GithubExploit	Exploit for Improper Access Control in Webmin	5 Aug 202506:38	–	githubexploit
GithubExploit	Exploit for Improper Access Control in Webmin	8 Nov 202215:22	–	githubexploit
GithubExploit	Exploit for Improper Access Control in Webmin	22 Mar 202203:49	–	githubexploit
GithubExploit	Exploit for Improper Access Control in Webmin	22 Mar 202203:49	–	githubexploit
GithubExploit	Exploit for Improper Access Control in Webmin	6 Mar 202200:03	–	githubexploit
GithubExploit	Exploit for Improper Access Control in Webmin	17 Oct 202211:47	–	githubexploit
ATTACKERKB	CVE-2022-0824	2 Mar 202212:15	–	attackerkb
BDU FSTEC	The vulnerability of the File Manager web interface for system administration on UNIX-like operating systems, such as Webmin, allows a perpetrator to escalate their privileges or execute arbitrary code.	28 Mar 202200:00	–	bdu_fstec

NVD

Node

webmin webminRange<1.990

[
  {
    "vendor": "webmin",
    "product": "webmin/webmin",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "1.990",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
notes	www.notes.netbytesec.com/2022/03/webmin-broken-access-control-to-post-auth-rce.html
packetstormsecurity	www.packetstormsecurity.com/files/166240/Webmin-1.984-Remote-Code-Execution.html
github	www.github.com/webmin/webmin/commit/39ea464f0c40b325decd6a5bfb7833fa4a142e38
huntr	www.huntr.dev/bounties/d0049a96-de90-4b1a-9111-94de1044f295
packetstormsecurity	www.packetstormsecurity.com/files/169700/Webmin-1.984-File-Manager-Remote-Code-Execution.html

Parameter	Position	Path	Description	CWE
user	request body	session_login.cgi	Login endpoint used to authenticate before exploit	CWE-863, CWE-284
pass	request body	session_login.cgi	Login endpoint used to authenticate before exploit	CWE-863, CWE-284
link	request body	extensions/file-manager/http_download.cgi	Download payload CGI from remote URL into Webmin File Manager	CWE-863, CWE-284
username	request body	extensions/file-manager/http_download.cgi	Download payload CGI from remote URL into Webmin File Manager	CWE-863, CWE-284
password	request body	extensions/file-manager/http_download.cgi	Download payload CGI from remote URL into Webmin File Manager	CWE-863, CWE-284
path	request body	extensions/file-manager/http_download.cgi	Download payload CGI from remote URL into Webmin File Manager	CWE-863, CWE-284
name	request body	extensions/file-manager/chmod.cgi	Change permissions of uploaded payload to executable (0755)	CWE-863, CWE-284
perms	request body	extensions/file-manager/chmod.cgi	Change permissions of uploaded payload to executable (0755)	CWE-863, CWE-284
applyto	request body	extensions/file-manager/chmod.cgi	Change permissions of uploaded payload to executable (0755)	CWE-863, CWE-284
path	request body	extensions/file-manager/chmod.cgi	Change permissions of uploaded payload to executable (0755)	CWE-863, CWE-284

17 Jun 2026 04:21Current

8.8High risk

Vulners AI Score8.8

CVSS 3.18.8

CVSS 29

CVSS 38.3

EPSS0.96977