Security Advisory

CVE-2019-12840

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-06-15 19:52:10
Last updated 2024-08-04 23:32:55
Assigner mitre
State PUBLISHED

Description

In Webmin through 1.910, any user authorized to the "Package Updates" module can execute arbitrary commands with root privileges via the data parameter to update.cgi.