Skip to content
OpenAdvisories
Low · 3.1 CVE-2024-36452 EUVD-2024-36096GHSA-vmfr-vww2-xr2w

Cross-site request forgery vulnerability exists in ajaxterm module of Webmin versions prior to 2.003. If this vulnerability is exploited, u…

Published Jul 10, 2024 · Updated Nov 5, 2024 · Assigned by jpcert

Description

Cross-site request forgery vulnerability exists in ajaxterm module of Webmin versions prior to 2.003. If this vulnerability is exploited, unintended operations may be performed when a user views a malicious page while logged in. As a result, data within a system may be referred, a webpage may be altered, or a server may be permanently halted.

Affected products

VendorProductAffectedFixed
Webmin Webmin versions prior to 2.003 —

Advisories 1

References