JVN#61208749 Webmin OS command injection vulnerability

Webmin is a web-based system management tool. Webmin for Windows contains a vulnerability that allows an unauthorized Webmin user to execute OS commands by entering a specially crafted URL.

Impact

An attacker could execute arbitrary OS commands with Local System privileges on a computer where Webmin is installed.

Solution

Update the Software
Webmin 1.370, in which the vulnerability is fixed, has been released by the Webmin project.

Products Affected

Webmin 1.360 for Windows and earlier