CVE-2017-15644

SSRF exists in Webmin 1.850 via the PATH_INFO to tunnel/link.cgi, as demonstrated by a GET request for tunnel/link.cgi/http://INTRANET-IP:8000

published October 19, 2017

CVSS
—
EPSS
9%
Percentile
95.2
In the wild
Unconfirmed
What it is

SSRF exists in Webmin 1.850 via the PATH_INFO to tunnel/link.cgi, as demonstrated by a GET request for tunnel/link.cgi/http://INTRANET-IP:8000.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08932 · 95.2th percentile
Published
2017-10-19T22:00Z
EPSS history
Timeline
  • 19 OCT 22:00Z
    SSRF exists in Webmin 1.850 via the PATH_INFO to tunnel/link.cgi, as demonstrated by a GET request for tunnel/link.cgi/http://INTRANET-IP:8000
    cvelistv5