CVE-2024-12828 Webmin CGI Command Injection Remote Code Execution Vulnerability

🗓️ 30 Dec 2024 16:13:48Reported by zdiType

Webmin CGI command injection allows remote code execution with user authentication required.

Reporter	Title	Published	Views	Family All 7
NVD	CVE-2024-12828	30 Dec 202417:15	–	nvd
UbuntuCve	CVE-2024-12828	30 Dec 202400:00	–	ubuntucve
OSV	CVE-2024-12828	30 Dec 202417:15	–	osv
Cvelist	CVE-2024-12828 Webmin CGI Command Injection Remote Code Execution Vulnerability	30 Dec 202416:48	–	cvelist
CVE	CVE-2024-12828	30 Dec 202417:15	–	cve
The Hacker News	Apache Tomcat Vulnerability CVE-2024-56337 Exposes Servers to RCE Attacks	24 Dec 202406:06	–	thn
The Hacker News	⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [6 Jan]	6 Jan 202512:05	–	thn

Source	Link
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-24-1725/
github	www.github.com/webmin/authentic-theme/commit/61e5b10227b50407e3c6ac494ffbd4385d1b59df

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

30 Dec 2024 16:48Current

9.9High risk

Vulners AI Score9.9

CVSS39.9

EPSS0.0004

SSVC

CWE-78