CVE-2019-9624

Webmin 1.900 allows remote attackers to execute arbitrary code by leveraging the "Java file manager" and "Upload and Download" privileges to upload a crafted…

published March 7, 2019

CVSS
—
EPSS
24%
Percentile
97.8
In the wild
Unconfirmed
What it is

Webmin 1.900 allows remote attackers to execute arbitrary code by leveraging the "Java file manager" and "Upload and Download" privileges to upload a crafted .cgi file via the /updown/upload.cgi URI.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.23689 · 97.8th percentile
Published
2019-03-07T05:00Z
EPSS history
Timeline
  • 22 SEP 03:18Z
    EPSS moved 24% → 35%
    epss
  • 06 SEP 03:13Z
    EPSS moved 24% → 35%
    epss
  • 30 AUG 16:02Z
    EPSS moved 35% → 24%
    epss
  • 29 AUG 04:57Z
    EPSS moved 24% → 35%
    epss
  • 07 MAR 05:00Z
    Webmin 1.900 allows remote attackers to execute arbitrary code by leveraging the "Java file manager" and "Upload and Download" privileges to upload a crafted…
    cvelistv5