CVE-2021-32162

A Cross-site request forgery CSRF vulnerability exists in Webmin 1.973 through the File Manager feature...

CVE-2021-32162

The connected documents establish CVE-2021-32162 as a CSRF vulnerability in Webmin 1.973 via the File Manager feature, caused by missing token validation for CSRF protection. The issue potentially allows an attacker to trick victims into performing sensitive actions through the Webmin interface w...

CVE-2021-32161

A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 through the File Manager feature...

CVE-2021-32161

CVE-2021-32161 is an XSS vulnerability in Webmin 1.973 via the File Manager feature. It stems from insufficient input sanitization of user-supplied parameters in the File Manager, enabling attacker-controlled JavaScript in the user’s browser. Affected: Webmin (version 1.973) and its File Manager....

CVE-2021-32160

A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 through the Add Users feature...

CVE-2021-32160

Webmin 1.973 (Add Users feature) has a cross-site scripting (XSS) vulnerability. The issue arises from insufficient filtering/escaping of user-supplied input in the Add Users flow, allowing injected JavaScript to be executed in the client browser. Affected product: Webmin 1.973 (per CVE-2021-3216...

CVE-2021-32159

A Cross-site request forgery CSRF vulnerability exists in Webmin 1.973 via the Upload and Download feature...

CVE-2021-32159

CVE-2021-32159 affects Webmin 1.973 via the Upload and Download feature, due to missing CSRF token validation. This CSRF can enable sensitive actions; exploitable through normal web requests without authentication, per connected records. Remediation noted in a Nessus entry suggests upgrading to W...

CVE-2021-32158

CVE-2021-32158 is an XSS vulnerability in Webmin 1.973 exploited via the Upload and Download feature. The issue stems from insufficient input filtering/escaping of user-supplied parameters in that function, enabling script execution in the client context. The CVE is corroborated by multiple sourc...

CVE-2021-32158

A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 via the Upload and Download feature...

CVE-2021-32157

Webmin 1.973 contains a Cross-Site Scripting (XSS) vulnerability via the Scheduled Cron Jobs feature. The issue arises from insufficient filtering/escaping in that feature, enabling client-side JavaScript execution. Connected sources confirm CVE-2021-32157 and corroborating mentions in RH and OSV...

CVE-2021-32157

A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature...

CVE-2021-32156

A cross-site request forgery CSRF vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature...

CVE-2021-32156

CVE-2021-32156 affects Webmin 1.973 via the Scheduled Cron Jobs feature. Root cause: CSRF due to lack of token validation in the Cron/scheduled task handling. Impact: allows cross-site requests that could perform sensitive actions; CVSS v3.1 base score 8.8 (HIGH) with UI/Risk requiring user inter...

PT-2022-10065

Name of the Vulnerable Software and Affected Versions Webmin version 1.973 Description A cross-site request forgery CSRF vulnerability exists in the Scheduled Cron Jobs feature. This issue allows for malicious requests to be made on behalf of a user without their knowledge or consent...

Webmin 跨站脚本漏洞

Webmin is a set of Web-based system administration tools for Unix-like operating systems from the Webmin community.A cross-site scripting vulnerability exists in Webmin version 1.973, which stems from a lack of filtering and escaping of user-submitted parameters in the file management...

Webmin 跨站脚本漏洞

Webmin is a set of Web-based system administration tools for Unix-like operating systems from the Webmin community.A cross-site scripting vulnerability exists in Webmin version 1.973, which stems from the lack of filtering and escaping of user-submitted parameters for the Add User feature. An...

PT-2022-10069

Name of the Vulnerable Software and Affected Versions Webmin version 1.973 Description A Cross-Site Scripting XSS issue exists in the Add Users feature. Recommendations For Webmin version 1.973, consider disabling the Add Users feature until a patch is available. Restrict access to this feature t...

Webmin 跨站请求伪造漏洞

Webmin is a set of Web-based system administration tools for Unix-like operating systems from the Webmin community.A cross-site request forgery vulnerability exists in Webmin version 1.973, which stems from the lack of token validation for cross-site request forgery in the file management...

PT-2022-10070

Name of the Vulnerable Software and Affected Versions Webmin version 1.973 Description A Cross-Site Scripting XSS issue exists in the File Manager feature. Recommendations For Webmin version 1.973, consider disabling the File Manager feature until a patch is available. Restrict access to the File...