CVE-2017-15645

CSRF exists in Webmin 1.850

published October 19, 2017

CVSS
—
EPSS
3%
Percentile
88.1
In the wild
Unconfirmed
What it is

CSRF exists in Webmin 1.850. By sending a GET request to at/create_job.cgi containing dir=/&cmd= in the URI, an attacker to execute arbitrary commands.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03233 · 88.1th percentile
Published
2017-10-19T22:00Z
EPSS history
Timeline
  • 19 OCT 22:00Z
    CSRF exists in Webmin 1.850
    cvelistv5