CVE-2020-35606

Arbitrary command execution can occur in Webmin through 1.962

published December 21, 2020

CVSS

—

EPSS

28%

Percentile

98.1

In the wild

Unconfirmed

What it is

Arbitrary command execution can occur in Webmin through 1.962. Any user authorized for the Package Updates module can execute arbitrary commands with root privileges via vectors involving %0A and %0C. NOTE: this issue exists because of an incomplete fix for CVE-2019-12840.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.28048 · 98.1th percentile
Published: 2020-12-21T19:19Z

EPSS history

Timeline

21 DEC 19:19Z
Arbitrary command execution can occur in Webmin through 1.962
cvelistv5