CVE-2012-2983

file/edit_html.cgi in Webmin 1.590 and earlier does not perform an authorization check before showing a file's unedited contents, which allows remote attackers…

published September 11, 2012

CVSS
—
EPSS
20%
Percentile
97.5
In the wild
Unconfirmed
What it is

file/edit_html.cgi in Webmin 1.590 and earlier does not perform an authorization check before showing a file's unedited contents, which allows remote attackers to read arbitrary files via the file field.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.20456 · 97.5th percentile
Published
2012-09-11T18:00Z
EPSS history
Timeline
  • 11 SEP 18:00Z
    file/edit_html.cgi in Webmin 1.590 and earlier does not perform an authorization check before showing a file's unedited contents, which allows remote attackers…
    cvelistv5